Level 3 – MDR Lead / Security Architect
Level 3 Analysts serve as senior escalation points and platform architects.
They oversee threat-hunting, platform optimization, and integration strategy across
SentinelOne, FortiSIEM, FortiSOAR, UEBA, KnowBe4, and Vicarius within the MDR ecosystem.
Lead threat-hunting and proactive detection engineering using advanced analytics and UEBA behavior models.
Architect and maintain end-to-end integration across MDR stack —
FortiSOAR, SentinelOne, FortiSIEM, KnowBe4, Vicarius.
Oversee EDR/agent lifecycle management for ~9,200 endpoints (7,800 users + 1,400 servers).
Manage FortiSIEM collectors, connectors, and correlation rules to ensure complete log ingestion.
Define response frameworks, governance dashboards, and compliance reports for HIPAA/HITRUST alignment.
Act as technical liaison with Mercyhealth and vendors for platform upgrades, roadmap planning, and audits.
Mentor Level 1 & 2 analysts, lead tabletop exercises, and ensure readiness for incident response.
Drive continuous improvement and automation initiatives using FortiSOAR playbooks and custom integrations.
Required Skills & Experience
7 + years in SOC/MDR architecture or security engineering roles.
Proven hands-on experience designing and scaling Fortinet SIEM/SOAR, SentinelOne, and UEBA integrations.
Strong understanding of security frameworks (NIST 800-53, CIS Controls, MITRE ATT&CK).
Advanced scripting/automation (Python, PowerShell, REST APIs) for orchestration.
Leadership and client-facing communication skills for governance and audit presentations.
Certifications: CISSP, CISM, GIAC (GSOC, GCFA), Fortinet NSE 6–8, or equivalent.
