UK remote
Lead AI Solutions Architect SME
About this role
Anticipated Contract End Date/Length: March 31, 2027 Work set up: Remote, with occasional client-site visits in London, currently every other Tuesday Clearance required: SC Clearance Our client in the Information Technology and Services industry is looking for a Lead AI Solutions Architect SME to lead technical discovery and solution options analysis for applying AI to augment Cyber Security Operations Centre (SOC) activities.
The role will assess the existing SOC technology and data landscape, identify viable AI use cases, and define a secure target architecture and delivery roadmap. Responsibilities Assess the existing SOC architecture, including SIEM, SOAR, EDR/XDR, threat intelligence, case management, and security data platforms. Evaluate SOC data availability, quality, and suitability for AI-enabled use cases. Identify opportunities for AI augmentation across alert triage, enrichment, investigation, threat intelligence, incident summarisation, detection engineering, and reporting.
Evaluate appropriate AI patterns, including machine learning, retrieval-augmented generation (RAG), generative AI, assistants, and agentic approaches. Determine when conventional automation or process improvement is more appropriate than AI. Define integration patterns between AI services and existing cyber security platforms. Identify security, privacy, assurance, and human-in-the-loop requirements. Assess risks associated with hallucinations, prompt injection, sensitive-data exposure, and inappropriate autonomous actions.
Prioritise use cases based on business value, feasibility, data availability, complexity, and risk. Identify technical dependencies, constraints, and implementation considerations. Produce an AI use-case and feasibility assessment. Document data and integration requirements. Develop a build-versus-buy options assessment. Define security and assurance considerations. Develop the target architecture and implementation roadmap.
Document technical risks, dependencies, and assumptions. Demonstrate expertise in AI solution architecture and technical design. Possess knowledge of generative AI, large language models (LLMs), RAG, and agentic AI patterns. Understand cyber security operations and Security Operations Centre (SOC) technologies. Have experience with SIEM, SOAR, EDR/XDR, and security tooling integration. Demonstrate knowledge of data architecture, APIs, and integration patterns.