Principal Architect, Security Operations

The Principal Architect works independently as a functional expert across the Security Operations Center, other Danaher Information Security functions, enterprise and OpCo-level technology teams, and strategic vendors to solve complex problems with broad enterprise impact and to enable scalable, automated, and measurable security operations. This position reports to Danaher's Security Operations leadership and is part of the enterprise-wide Danaher Information Security (DIS) team. The position is remote.

In this role, you will have the opportunity to:

• Own end-to-end technology architecture and reference designs for the Security Operations technology stack, including security data pipelines, data lakes, SIEM, SOAR, solution-integrated AI, and custom MCP architectures.
• Establish and maintain integration patterns and architecture designs for cyber technologies, such as CrowdStrike, and non-cyber technologies that enable data enrichment, investigations, and automated response.
• Define enterprise detection, logging, and telemetry standards that improve visibility, analytics, investigation quality, and response consistency across Danaher.
• Evaluate, select, and guide implementation of security technologies and services that enhance detection, response, automation, and measurable operational outcomes.
• Lead architecture alignment across Security Operations, Cyber Defense, infrastructure, cloud, identity, data, and vendor teams to ensure scalable, supportable, and secure designs.

The essential requirements of the job include:

• 12+ years of experience in cybersecurity, security architecture, security engineering, security operations, detection engineering, incident response, or related technology roles.
• Experience designing or governing enterprise security operations technology architectures, including SIEM, SOAR, endpoint detection and response, cloud security telemetry, security data pipelines, or security data lakes.
• Experience establishing integration patterns across cyber and enterprise technology platforms using APIs, event streaming, data enrichment, orchestration, or automated response workflows.
• Experience defining detection, logging, telemetry, or security data standards for enterprise-scale environments.

It would be a plus if you also possess previous experience in:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field.
• Experience with CrowdStrike, Microsoft Sentinel, Splunk, Google SecOps, ServiceNow SecOps, Palo Alto Cortex XSOAR, or comparable enterprise security operations platforms; experience applying AI to security operations use cases, including alert enrichment, investigation support, detection engineering, response automation, or custom MCP architectures.
• Security architecture or cybersecurity certification such as CISSP, CCSP, GIAC, SABSA, TOGAF, or equivalent.