Principal Architect - Cyber Security

Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member s contributions and offers a supportive environment for career development. Come, stay, and grow with us.

Job Description

Cyber Defense Strategy Architecture

• Define and maintain enterprise Blue Team security architecture roadmap.
• Design scalable cyber defense capabilities across cloud, endpoint, identity, network, applications, OT, and SaaS environments.
• Lead security architecture decisions for SIEM, SOAR, XDR, UEBA, TIP, DSPM, and AI Security platforms.
• Establish security engineering standards, reference architectures, and defense patterns.

SIEM Engineering Detection Strategy

• Own enterprise SIEM architecture, use case lifecycle, content governance, and platform optimization.
• Develop risk-based detection frameworks aligned to MITRE ATTCK.
• Drive Detection-as-Code practices with CI/CD integration.
• Improve detection fidelity through behavioral analytics, threat intelligence, and AI-powered analytics.
• Establish threat-based detection coverage metrics.

SOAR Autonomous Security Operations

• Lead SOAR architecture and orchestration strategy.

• Design automated response playbooks for high-volume attack scenarios.

• Implement machine-speed containment actions such as:

• Endpoint isolation

• Account suspension

• Token revocation

• Network containment

• Email quarantine

• IOC blocking

• Reduce analyst workload through AI-assisted investigation and autonomous workflows.

AI Security Defense

• Design controls to detect and defend against:

• Prompt injection attacks

• LLM abuse

• AI model poisoning

• Data leakage through AI platforms

• Autonomous agent attacks

• Deepfake and synthetic identity threats

• Implement AI-assisted threat detection, correlation, and investigation capabilities.

• Establish governance, monitoring, and security controls for enterprise AI adoption.

Threat Hunting Adversary Detection

• Build and lead enterprise proactive threat hunting programs.

• Develop advanced hunting methodologies focused on:

• Living-off-the-land attacks

• Identity compromise

• Lateral movement

• Cloud-native attacks

• Ransomware precursors

• Insider threats

• AI-driven attack campaigns

• Create repeatable hunt playbooks and hunting analytics.

• Drive adversary emulation and purple team exercises.

Emerging Threat Research

• Track evolving threat actor TTPs.

• Conduct threat-focused research on:

• AI-powered phishing

• GenAI-enabled malware

• Autonomous attack tooling

• Ransomware evolution

• Supply chain attacks

• Cloud and SaaS threats

• Translate intelligence into actionable detections and mitigations.

Security Leadership Influence

• Provide technical leadership across SOC, IR, CDE, DLP, Cloud Security, and AppSec teams.
• Mentor senior security engineers, architects, and threat hunters.
• Act as executive advisor for cyber defense modernization initiatives.
• Lead security architecture reviews and tabletop exercises.

Qualifications

Experience

• 15+ years of cybersecurity experience.
• 8+ years in Security Operations, SIEM Engineering, Threat Hunting, or Cyber Defense Architecture.
• Proven experience building enterprise-scale SOC programs.
• Experience leading security transformation initiatives.

Technical Expertise

Deep expertise in:

• SIEM Platforms

• Microsoft Sentinel

• Splunk

• Cortex XSIAM

• Elastic

• SOAR Platforms

• Cortex XSOAR

• Microsoft Security Copilot Sentinel Automation

• Splunk SOAR

• Detection Engineering

• Threat Intelligence

• MITRE ATTCK

• Threat Hunting

• Cloud Security

• Identity Security

• EDR/XDR

• UEBA

• Data Protection DLP

• Security Analytics

• AI Security

Preferred Certifications

CISSP, GCIA, GCTI, GREM, GMON, SABSA, Azure Security Engineer, Microsoft Sentinel Specialist, SANS Threat Hunting Certifications

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.