Principal Architect, Security Operations

Danaher•Carlsbad, CA

3d•Remote

About The Position

At Danaher, the Principal Architect, Security Operations owns the enterprise architecture and reference designs for the Security Operations technology stack. This role defines how the technology enabling security data collection and retention, detection engineering, investigation workflows, automation, and response technologies are designed and integrated across the enterprise, including security data pipelines, data lakes, SIEM, SOAR, solution-integrated AI, and custom-built MCP architectures. The Principal Architect works independently as a functional expert across the Security Operations Center, other Danaher Information Security functions, enterprise and OpCo-level technology teams, and strategic vendors to solve complex problems with broad enterprise impact and to enable scalable, automated, and measurable security operations. This position reports to Danaher’s Security Operations leadership and is part of the enterprise-wide Danaher Information Security (DIS) team. The position is remote. In this role, you will have the opportunity to: Own end-to-end technology architecture and reference designs for the Security Operations technology stack, including security data pipelines, data lakes, SIEM, SOAR, solution-integrated AI, and custom MCP architectures. Establish and maintain integration patterns and architecture designs for cyber technologies, such as CrowdStrike, and non-cyber technologies that enable data enrichment, investigations, and automated response. Define enterprise detection, logging, and telemetry standards that improve visibility, analytics, investigation quality, and response consistency across Danaher. Evaluate, select, and guide implementation of security technologies and services that enhance detection, response, automation, and measurable operational outcomes. Lead architecture alignment across Security Operations, Cyber Defense, infrastructure, cloud, identity, data, and vendor teams to ensure scalable, supportable, and secure designs.

Requirements

12+ years of experience in cybersecurity, security architecture, security engineering, security operations, detection engineering, incident response, or related technology roles.
Experience designing or governing enterprise security operations technology architectures, including SIEM, SOAR, endpoint detection and response, cloud security telemetry, security data pipelines, or security data lakes.
Experience establishing integration patterns across cyber and enterprise technology platforms using APIs, event streaming, data enrichment, orchestration, or automated response workflows.
Experience defining detection, logging, telemetry, or security data standards for enterprise-scale environments.
Ability to travel around 25%, overnight, within territory or other Danaher locations.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field.
Experience with CrowdStrike, Microsoft Sentinel, Splunk, Google SecOps, ServiceNow SecOps, Palo Alto Cortex XSOAR, or comparable enterprise security operations platforms.
Experience applying AI to security operations use cases, including alert enrichment, investigation support, detection engineering, response automation, or custom MCP architectures.
Security architecture or cybersecurity certification such as CISSP, CCSP, GIAC, SABSA, TOGAF, or equivalent.

Responsibilities

Own end-to-end technology architecture and reference designs for the Security Operations technology stack, including security data pipelines, data lakes, SIEM, SOAR, solution-integrated AI, and custom MCP architectures.
Establish and maintain integration patterns and architecture designs for cyber technologies, such as CrowdStrike, and non-cyber technologies that enable data enrichment, investigations, and automated response.
Define enterprise detection, logging, and telemetry standards that improve visibility, analytics, investigation quality, and response consistency across Danaher.
Evaluate, select, and guide implementation of security technologies and services that enhance detection, response, automation, and measurable operational outcomes.
Lead architecture alignment across Security Operations, Cyber Defense, infrastructure, cloud, identity, data, and vendor teams to ensure scalable, supportable, and secure designs.