Remote GSOC Architecture Build

I am standing up a brand-new, fully remote Global Security Operations Center and need an architect who can design the entire stack—from concept through to an operational runbook—focused on proactive threat detection and monitoring. My primary concern is cyber-attack defence, so the design must give equal weight to: • real-time network security visibility, • endpoint telemetry and response, • cloud-native threat detection, and • data-centric security controls that track sensitive information wherever it sits. You will take ownership of the overall architecture, tool selection, integration methodology, and workflow design that lets a geographically distributed security team see, triage, and respond to threats 24/7. I expect you to map out log collection, SIEM/SOAR configuration, alerting logic, escalation paths, KPIs, and the governance model needed for continuous improvement. Deliverables I need from you: 1. High-level architecture diagram with technology recommendations (commercial and open-source options welcome). 2. Detailed build sheet covering sizing, licensing, and deployment sequencing. 3. Playbook/runbook drafts for initial monitoring and incident response. 4. Gap analysis against common frameworks (e.g., NIST, MITRE ATT&CK) to show coverage of network, endpoint, cloud, and data threats. 5. A 30-60-90 day roadmap to move from design to a live “minimum viable GSOC”. If you have previously designed or led remote SOC/GSOC builds and can articulate how your approach will reduce mean-time-to-detect and mean-time-to-respond, I’m ready to review your proposal and timeline.

Project ID: 40343214