Drimva

Bank of America

Senior Security Architect - Security Operations & Threat Response (SOTR)

$140K–$205K

Denver · Senior · Full-time · Posted Sep 18, 2026

Experience
10+ years in cybersecurity, security engineering, or enterprise architecture; 5+ years designing or leading Security Operations technologies.

About the job

Leads architecture for strategic Security Operations & Threat Response initiatives, modernizing and integrating security platforms and defining future-state security strategy.

What you'll do

  • Define target-state architecture, security strategy, standards, integration patterns, and roadmaps.
  • Align detection, investigation, automation, and threat intelligence capabilities; lead architecture governance and technical reviews.
  • Design secure integrations across cybersecurity and cloud platforms, and evaluate emerging technologies, including AI-driven security operations.

What they ask for

  • 10+ years of cybersecurity, security engineering, or enterprise architecture experience.
  • 5+ years designing or leading Security Operations technologies.
  • Deep expertise in SIEM, SOAR, Threat Intelligence, ServiceNow, Detection Engineering, or Incident Response technologies; experience with API-driven integrations and distributed systems.
  • Strong cloud security architecture experience with AWS and Azure, and understanding of cybersecurity frameworks and security controls.

Nice to have

  • Experience in a large financial institution or highly regulated environment; supporting SOC, Threat Management, Detection Engineering, or Incident Response teams.
  • Knowledge of AI-driven security operations and response automation; experience with threat intelligence, attack simulation, and exposure management; listed security certifications.

Pay

$140,500.00 - $205,000.00 annualized salary (USD; base salary)

Tools

SIEM, SOAR, Threat Intelligence, ServiceNow, AWS, Azure

AI focus

Evaluate emerging technologies, including AI-driven security operations; knowledge of AI-driven security operations and response automation is preferred.

Model-written summary · the original posting is authoritative

First seen Oct 14, 2026 · Last verified Nov 6, 2026 (UTC)