{"id":3214164,"url":"https://alion.io/job/adm-cyber-defense-platform-architect","title":"Cyber Defense Platform Architect","company":{"id":6178,"name":"ADM","domain":"adm.com","url":"https://alion.io/company/adm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":55000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-24T17:39:24Z","employer_posted_date":null,"last_verified_at":"2026-10-24T17:39:24Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"About ADM:\nWe are one of the world's largest nutrition companies and a global leader in human and animal nutrition. We unlock the power of nature to provide nourishing quality of life by transforming crops into ingredients and solutions for foods, beverages, supplements, livestock, aquaculture, and pets.\n\nAbout ADM India Hub:\nAt ADM, we have long recognized the strength and potential of India's talent pool, which is why we have maintained a presence in the country for more than 25 years. Building on this foundation, we have now established ADM India Hub, our first GCC in India.\n At ADM India Hub, we are hiring for IT and finance roles across diverse technology and business functions. We stand at the intersection of global expertise and local excellence, enabling us to drive innovation and support our larger purpose of unlocking the power of nature to enrich quality of life.\n\nCyber Defense Platform Architect\nKey Responsibilities:\nCyber Defense Platform Strategy & Architecture: Define and maintain the vision, principles, target-state architecture, standards, reference patterns, and roadmap for global cyber defense platforms and enabling technologies.\nSecure by Design: Embed cyber defense requirements, telemetry, logging, integration, access control, recoverability, and operational support needs into solution and platform designs from the earliest architecture and design stages.\nSIEM Modernization: Lead the architecture and modernization of enterprise SIEM capabilities, including scalable ingestion, normalization, enrichment, correlation, retention, search, analytics, and cost-management patterns across hybrid and multi-cloud environments.\nSecurity Data Visibility Fabric: Establish an architecture that makes security-relevant telemetry discoverable, trustworthy, contextualized, reusable, and accessible across identity, endpoint, network, cloud, application, data, and Operational Technology environments.\nContinuous Operations & Data Flow: Define resilient, continuous, and observable data-flow patterns that provide Cybersecurity Operations with timely access to required telemetry, context, enrichment, and response signals across normal, degraded, and recovery operating conditions.\nDetection Engineering Enablement: Partner with Cyber Defense Operations to provide the telemetry, platform capabilities, integration patterns, test environments, deployment pathways, and architecture needed for effective detection engineering. Cyber Defense Operations retains responsibility for creating, tuning, prioritizing, and operating detection content.\nSOAR & Automation: Design orchestration and automation patterns for alert enrichment, investigation, case management, containment, recovery, and evidence collection while maintaining appropriate human oversight and control.\nSecurity Operations Platform Enablement: Translate operational requirements from Cyber Defense Operations and Incident Response into resilient platform capabilities that improve visibility, reduce alert fatigue, increase automation, and support measurable improvements in MTTD, MTTR, investigation quality, response consistency, and analyst productivity.\nCloud Cyber Defense: Design monitoring, analytics, and response capabilities for Microsoft Azure and hybrid environments; ensure cloud-native telemetry and controls are integrated into enterprise cyber defense workflows.\nAI-Enabled Security Operations: Evaluate and responsibly apply AI, machine learning, and generative AI to threat detection, investigation, summarization, prioritization, automation, and decision support, with governance, validation, and human accountability.\nPlatform Integration: Define secure and resilient integrations among SIEM, SOAR, XDR, threat intelligence, identity, endpoint, network, vulnerability, cloud, case management, and data platforms through supported APIs and event-driven patterns.\nResilience & Continuity Assurance: Ensure cyber defense platforms, integrations, automation, and critical data pipelines have documented resilience, availability, backup, recovery, capacity, failover, and continuity requirements that are validated through architecture reviews and testing.\nMetrics & Continuous Improvement: Establish architecture and capability measures for telemetry coverage, detection efficacy, false-positive reduction, automation effectiveness, platform resilience, MTTD, MTTR, and operational adoption.\nArchitecture Governance: Lead technical evaluations, architecture reviews, design decisions, exception reviews, and lifecycle planning for cyber defense capabilities and supporting technologies.\nCross-team Collaboration: Partner with enterprise architects, engineers, analysts, product owners, technology teams, vendors, and business stakeholders to translate operational needs and threat scenarios into sustainable capabilities.\nDocumentation & Knowledge Transfer: Develop and maintain capability models, roadmaps, reference architectures, standards, design patterns, decision records, and operational transition documentation.\nIndustry Awareness: Maintain knowledge of evolving attacker techniques, security operations practices, cloud technologies, automation, AI, and industry frameworks, and use that knowledge to guide investment and target architectures.\nOperating Model Clarity: Maintain clear alignment between Architecture & Engineering responsibilities and Cyber Defense Operations responsibilities, ensuring platform architecture, engineering, and transition activities are distinct from day-to-day security monitoring and incident execution.\n\nRequired Skills & Experience:\nStrong experience designing or modernizing enterprise cyber defense platforms, security monitoring architectures, security analytics environments, or detection and response technology ecosystems.\nDemonstrated architecture or senior engineering experience with SIEM, SOAR, XDR, security analytics, threat intelligence platforms, incident response integrations, and security operations enablement.\nHands-on knowledge of Microsoft Sentinel, Microsoft Defender XDR, Defender for Cloud, Microsoft Entra ID, Azure Monitor, Log Analytics, and Azure-native integration and automation services.\nExpertise in security telemetry architecture, including source onboarding, parsing, normalization, enrichment, schema design, data quality, retention, tiering, access control, and cost optimization.\nExperience designing highly available and recoverable security platforms and data pipelines, including resilience, continuity, capacity, failover, backup, recovery, monitoring, and operational support requirements.\nExperience enabling detection engineering through scalable telemetry, platform architecture, integration patterns, source control, automated testing, deployment pipelines, and partnership with security operations teams.\nKnowledge of MITRE ATT&CK and its practical use in threat-informed defense, detection mapping, gap analysis, purple-team validation, and operational reporting.\nExperience with automation and integration using APIs, webhooks, event-driven services, infrastructure as code, and scripting languages such as Python or PowerShell.\nUnderstanding of cloud security architecture and telemetry across Azure; AWS or Google Cloud Platform experience is a plus.\nKnowledge of identity, endpoint, network, email, application, data, vulnerability, and Operational Technology security signals and response dependencies.\nAbility to define and communicate architecture decisions, capability roadmaps, technical standards, risks, tradeoffs, and investment recommendations to technical and non-technical audiences.\nStrong analytical, problem-solving, communication, facilitation, and documentation skills.\nCollaborative mindset with experience working across architecture, engineering, operations, governance, and business teams.\n\nPreferred Requirements:\n7+ years of experience in Information Technology.\n5+ years of cybersecurity experience, including experience in security architecture or senior security engineering and direct exposure to Security Operations or Incident Response.\nExperience leading enterprise SIEM, SOAR, XDR, SOC platform modernization, security data lake, security analytics, telemetry fabric, or security automation initiatives.\nExperience with Microsoft Azure architecture and cloud-native security operations at enterprise scale.\nExperience applying AI or machine learning to security analytics, automation, investigation, or operational decision support.\nExperience with product-oriented operating models, platform lifecycle management, licensing, capacity planning, and value measurement.\nKnowledge of cybersecurity architecture and operations frameworks such as NIST Cybersecurity Framework, NIST SP 800-61, MITRE ATT&CK, Zero Trust, and Cybersecurity Mesh Architecture concepts.\nCurrent security or cloud certifications such as CISSP, CCSP, Microsoft Cybersecurity Architect Expert, Microsoft Azure Solutions Architect Expert, GIAC, or equivalent credentials.\nProject, program, or product management experience supporting complex global technology initiatives.\n\nLeadership Traits:\nOwnership mindset.\nCommitment to helping others thrive.\nContinuous learning.\nFostering diversity, equity, and inclusion.\n\nAdditional Information:\nThis position offers a complete benefit package, including 401K/ESOP, pension, health, life, and dental insurance. ADM is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and veteran status.","description_format":"text","description_chars":9568,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Continuous learning","Dental insurance","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Security Operations","Chemical Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-24T20:09:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/adm-cyber-defense-platform-architect","json_url":"https://alion.io/job/adm-cyber-defense-platform-architect.json","meta":{"generated_at":"2026-10-27T03:33:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2942,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6178},"rest":"https://alion.io/mcp/rest/get_company?id=6178"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fadm-cyber-defense-platform-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fadm-cyber-defense-platform-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fadm-cyber-defense-platform-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/adm-cyber-defense-platform-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fadm-cyber-defense-platform-architect"}]}