Senior Cybersecurity Solutions Architect (NYC)

Details

Bloomberg’s Cyber Security Operations Center (CSOC) safeguards the company’s digital environment by monitoring systems and networks for suspicious activity, leading containment and response efforts, formalizing lessons learned, and hardening defenses against future attacks.

The Process & Technology Optimization (PTO) team within CSOC designs, builds, and integrates process and technology solutions that improve cybersecurity operations. This role will help address evolving CSOC challenges, drive ambitious improvement goals, and implement scalable solutions that shape the future of cyber security operations at Bloomberg.

Responsibilities

Broaden CSOC Capabilities and Impact

• Own one or more areas of CSOC’s technology and process landscape, such as Network Security, EDR, Cloud, AI, or Telemetry.
• Manage and integrate vendor products, represent CSOC to external stakeholders, and ensure implementations align with the organization’s vision.
• Identify systemic cybersecurity operations issues, document potential solutions, and align with management to prioritize enterprise-wide resolution efforts.
• Formalize and disseminate best practices, making security operations more repeatable and systematic.
• Pilot and evaluate emerging technologies for practical adoption.
• Mentor and guide PTO and broader CSOC staff earlier in their careers.

Identify Optimizations

• Engage with CSOC functions including Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence to understand operational challenges.
• Transform CSOC operations by improving analyst speed, capabilities, and coverage through automation, technology, controls, and processes.
• Identify, collect, and surface measurable data and metrics from PTO-managed products to support data-driven process improvement.

Design and Implement Solutions

• Design and prioritize scalable, robust, and innovative process and technology solutions.
• Validate, reframe, and adapt user-originated solutions to align with broader vision and sustainable execution and maintenance paths.
• Design, build, execute, and maintain internally developed products through code or Low Code/No Code options such as SOAR.
• Design tooling and processes that surface the right information to CSOC teams at the moment they need it.
• Oversee the development and implementation of technical solutions, ensuring quality standards and project timelines are met.

Requirements

Technical Expertise

• 5+ years of experience in engineering, systems design, or a cybersecurity operations center role such as analyst, detection engineer, security engineer, or incident responder.
• Experience with data storage and retrieval systems, including SIEM platforms, databases, and data lakes.
• Ability to assess complex processes and identify optimization opportunities.
• Ability to quickly understand new technologies and products in a rapidly evolving security field.
• Experience with or exposure to automation and Low Code/No Code platforms such as SOAR.
• Experience managing vendor relationships or driving delivery through external engineering or product teams.

Problem Solving and Critical Thinking

• Proven ability to break down complex technical and operational problems into component parts.
• Creative and strategic mindset with the drive to pursue ambitious improvements.

Collaboration and Communication

• Inquisitive and curious listening style.
• Clear and concise written and verbal communication skills.
• Ability to acquire key context and share it effectively with team members.
• Experience providing feedback, coaching, or mentorship.

Preferred Qualifications

• 7+ years of experience working in or with a cybersecurity operations center as an analyst, detection engineer, security engineer, or incident responder.
• 7+ years of experience as a security engineer supporting or designing cybersecurity operations systems, particularly involving End Point Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention.
• Python or scripting skills sufficient to design and build custom integrations or extend automation platforms beyond their built-in capabilities.
• Experience protecting cloud infrastructure, including IaaS, PaaS, or SaaS; operating cloud-based security tooling; or applying GenAI capabilities to security use cases.

Benefits

Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental and vision coverage, short- and long-term disability benefits, a 401(k) match, life insurance, and wellness programs. The position also includes benefits and bonus eligibility as applicable.