Bloomberg

Global financial data, news, analytics provider

Senior Cybersecurity Solutions Architect

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeNew York, NY, USAIn-person

About the Job

Requirements

Have at least 5 years of experience in engineering, systems design, or a cybersecurity operations center role, such as analyst, detection engineer, security engineer, or incident responder.
Have experience with data storage and retrieval systems, such as security information and event management systems, databases, or data lakes.
Be able to analyze complex processes and identify optimization opportunities.
Be able to quickly understand new technologies and products.
Have experience with or exposure to automation and low-code/no-code platforms such as security orchestration, automation, and response systems.
Have experience managing vendor relationships or driving delivery through external engineering or product teams.
Be able to break complex technical and operational problems into component parts.
Have a strategic mindset and drive to pursue improvements.
Be an inquisitive and curious listener.
Communicate clearly and concisely in writing and verbally.
Be able to acquire key context and share it effectively with other team members.
Have experience providing feedback, coaching, or mentorship to others.

Responsibilities

Own one or more areas of the Cyber Security Operations Center’s technology and process landscape, such as network security, endpoint detection and response, cloud, artificial intelligence, or telemetry; manage and integrate vendor products in those areas, represent the center to external stakeholders, and ensure implementations align with the vision and receive ongoing oversight.
Identify systemic cybersecurity operations issues, document potential solutions, and align with management to prioritize resolution efforts across the enterprise.
Formalize and disseminate best practices to make security operations repeatable and measurable.
Pilot and evaluate emerging technologies for practical adoption.
Mentor and guide Process & Technology Optimization and broader Cyber Security Operations Center staff earlier in their careers, helping them build skills and take greater ownership over time.
Engage with Cyber Security Operations Center functions, including event analysis, threat hunting, incident response, detection engineering, and threat intelligence, to understand challenges that impede their core missions.
Identify opportunities to transform operations by improving analyst speed, capabilities, and coverage through automation and new technology, controls, or processes.
Identify, collect, and surface measurable data and metrics from managed products to enable data-driven process improvement across the Cyber Security Operations Center.
Design and prioritize scalable, robust, and innovative process and technology solutions.
Validate, reframe, and adapt user-originated solutions to align with broader vision and an appropriate execution and maintenance path, such as self-initiated, engineering-managed, or vendor-designed.
When solutions should be built internally, design, execute, and maintain products through code or low-code/no-code options such as security orchestration, automation, and response platforms.
Understand how supported Cyber Security Operations Center teams work and design tooling and processes to surface needed information; grant direct product access only when that is not practical.
Oversee the development and implementation of technical solutions, ensuring adherence to quality standards and project timelines.

Desired Qualifications

Have at least 7 years of experience working in or with a cybersecurity operations center as an analyst, detection engineer, security engineer, or incident responder.
Have at least 7 years of experience as a security engineer supporting or designing cybersecurity operations systems, particularly endpoint detection and response, threat intelligence platforms, email analysis, malware sandboxing, network intrusion detection, data loss prevention, or similar products and capabilities.
Have Python or scripting skills sufficient to design and build custom integrations or extend automation platforms beyond their built-in capabilities when needed.
Have experience protecting cloud infrastructure (infrastructure as a service, platform as a service, or software as a service), operating cloud-hosted security tooling, or applying generative artificial intelligence capabilities to security use cases.

What’s the role?

Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks.

The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.

We will trust you to:

Broaden CSOC’s Capabilities and Impact

Own one or more areas of CSOC’s technology and process landscape (e.g., Network Security, EDR, Cloud, AI, Telemetry), managing and integrating the vendor products within them, representing CSOC to external stakeholders, and ensuring vision-consistent implementation and ongoing oversight
Identify systemic cybersecurity operations issues, document potential methods to resolve, and align with management to prioritize resolution efforts across the enterprise
Formalize and disseminate best practices, turning security operations from art into repeatable science
Pilot and evaluate emerging technologies to evaluate practical adoption
Mentor and provide guidance to PTO and broader CSOC staff earlier in their careers, helping them build skills and take on greater ownership over time

Identify Optimizations

Engage deeply with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand and empathize with challenges that prevent teams from accomplishing their core missions
Look for opportunities to transform CSOC operations, including improving analyst speed, capabilities and coverage through automation and introduction of new technology, controls, or processes that were previously out of reach
Identify, collect, and surface measurable data and metrics from PTO-managed products, enabling data-driven process improvement across CSOC

Design & Implement Solutions

Design and prioritize scalable, robust, and innovative process and technology solutions
Validate, reframe, and adapt user-originated solutions to ensure alignment with broader vision and ideal execution and maintenance path (e.g. self-initiated, engineering-managed, or vendor-designed)
When it makes sense for solutions to be built internally, design, execute, and maintain these products (through code or Low Code/No Code options like SOAR)
Understand how the CSOC teams you support actually work, and design tooling and process to surface the right information at the moment they need it, falling back to granting direct product access only when that’s not a practical path
Oversee the development and implementation of technical solutions, ensuring adherence to quality standards and project timelines

You’ll need to have:

Technical Expertise

5+ years of experience in engineering, systems design, or a cybersecurity operations center role (as an analyst, detection engineer, security engineer, or incident responder)
Experience with data storage and retrieval systems (e.g. SIEM, databases, data lakes, etc.)
Able to consider a complex process and identify optimization opportunities
As security is a frequently evolving field, able to quickly understand new technologies and products
Experience with, or exposure to, automation and Low Code/No Code platforms such as a SOAR
Experience managing vendor relationships or driving delivery through external engineering or product teams

Ambitious Problem Solving & Critical Thinking Skills

Proven ability to dissect complex technical and operational problems into their component parts
Creative, strategic mindset with the drive to pursue ambitious improvements

Strong Collaboration & Communication Ability

Inquisitive and curious listener
Uses clear & concise written and verbal communication patterns
Expert knowledge sharer who can acquire key context and provide it effectively to other team members
Experience providing feedback, coaching, or mentorship to others

We’d love to see:

7+ years of experience working in or with a cybersecurity operations center (as an analyst, detection engineer, security engineer, or incident responder)
7+ years of experience as a security engineer (supporting or designing cybersecurity operations systems), specifically with products and capabilities like End Point Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, Data Loss Prevention, etc.
Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond their built-in capabilities, when the situation calls for it
Experience protecting cloud infrastructure (IaaS, PaaS, or SaaS), operating security tooling that runs in the cloud, or applying GenAI capabilities to security use cases

If this sounds like you:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional

Salary Range = 190,000 - 260,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

About the Company

Bloomberg

Global financial data, news, analytics provider

Bloomberg provides financial data, news, and analysis to help professionals make informed decisions and operate more transparently and efficiently. Its products deliver trusted information and insights through technology platforms that connect global financial communities, enable collaboration, and support decision-making. The company differentiates itself by offering broad, reliable data and news across markets, strong customer focus, and a culture that emphasizes collaboration, broad perspective, and doing the right thing for clients, people, and communities. Bloomberg’s goal is to improve market transparency and efficiency by delivering accurate information and tools that empower customers to act confidently and ethically.

Company size: 10,001+
Company stage: Not listed
Total funding: Not listed
Headquarters: New York City, New York
Founded: 1981

Recently Posted Jobs

Explore more opportunities at Bloomberg

See more jobs