Lead OT SOC Architect

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Are you a proven Security Operations Center architect ready to design and lead the defense of the world's most critical infrastructure? Have you built a SOC from the ground up — the platform, the detection content, the team — and are you ready to bring that mastery to the operational technology systems that keep water flowing, power on, and communities running?

Are you ready to take your career in Security Operations to its technical peak with one of the largest technology and engineering firms in the world? As the Lead OT SOC Architec
t, you'll be the architect and technical leader of Jacobs' managed OT Security Operations Center — designing the platform, defining what good looks like, and leading the engineers and analysts who protect our clients' most consequential systems. Jacobs designs and builds the world's infrastructure, and you'll play the central role in defending the industrial control systems at its heart.

As the Lead OT SOC Architect
, you will own the design and technical direction of a productized, multi-tenant OT Security Operations Center delivered as a managed service. You'll architect the SIEM and detection-engineering platform, design the triage and response workflows, and establish the standards your team operates by. You will lead, mentor, and set direction for SOC engineers and analysts, and you'll serve as the top-tier technical escalation point — the lead authority who resolves the hardest SOC issues before they reach the OT SOC Manager.

From detection strategy and platform architecture through continuous operational assurance, you'll translate deep Security Operations expertise into a defense capability tuned to the unique realities of OT where a cyber event is not a data event but a physical one, with consequences that can include operational disruption, environmental impact, and loss of life. You'll work across sales and delivery to embed this capability into new and active client programs, and you'll partner closely with controls, instrumentation, and systems teams across critical infrastructure OT control systems to ensure OT telemetry is visible, meaningful, and defended.

Are you ready to lead the technical heart of a next‑generation OT SOC? At Jacobs, we are building a more connected and sustainable world. Come join us as we engineer and defend the networks at the core of today's global infrastructure.

Primary responsibilities center on architecting the OT SOC platform and service, leading its detection-engineering and operations design, supervising the SOC team, and serving as the lead technical escalation authority — with additional responsibilities supporting client engagements and business development.

• Architect the end-to-end OT SOC platform — SIEM, detection pipeline, data model, enrichment, and multi-tenant service architecture — designing every decision for a scalable, productized managed-service end state
• Own the detection-engineering strategy and lifecycle design, build, test, version-control, and continuously improve detection content mapped to MITRE ATT&CK for IC, treating detections as code with change control and measurable coverage
• Design the SOC operational workflows — alert triage, severity routing, case management, escalation paths, and response playbooks — and codify the standards the team operates by
• Serve as the top-tier technical escalation point for all SOC issues, resolving the most complex and high-severity investigations before they require the OT SOC Manager’s involvement
• Lead, mentor, and develop SOC engineers and analysts; set investigation standards, triage thresholds, and escalation criteria that drive consistency, quality, and analyst growth
• Establish and own "continuous operational assurance" — defining what good looks like for each client environment, continuously verifying reality matches…