Jobs at Sygnia

Lead incident response and threat-hunting engagements for clients across EMEA, managing cross-functional cybersecurity, forensic, and research teams during sophisticated attacks. The role includes crisis management, client and executive communication, technical leadership, methodology development, global coordination, relationship management, business development, and thought leadership. The manager must provide decisive leadership during urgent incidents and may work outside normal hours or travel internationally.

Designs and manages secure, scalable AWS infrastructure, Kubernetes clusters, GitOps-based CI/CD pipelines, and infrastructure-as-code workflows. Implements DevSecOps, monitoring, logging, observability, and operational automation across development, staging, and production environments. Partners with developers, mentors engineers, influences platform architecture, and supports mission-critical systems through on-call participation and continuous improvement.

Develop and maintain Python backend services, optimize complex Snowflake SQL queries, and perform data engineering for a threat detection platform. Contribute across the full stack using ReactJS, support cloud infrastructure and CI/CD practices, troubleshoot platform components, and participate in agile development, architecture decisions, and technical direction.

Design and develop production-grade generative AI applications and agentic systems. Build secure, scalable, observable AI services using Python, Docker, and cloud technologies, while applying testing, evaluation, CI/CD, and troubleshooting best practices. Collaborate with researchers to transform prototypes into reliable containerized cloud applications. Contribute to technical innovation, product development, and engineering standards across GenAI solutions.

Provides internal help desk support to end users, troubleshooting desktop applications, workstations, mobile devices, and related equipment. Installs and tests computer equipment, supports Windows and Microsoft 365 environments, maintains hardware and software license inventories, and promotes IT support best practices. The role requires strong communication, customer service, independent problem-solving, and the ability to learn new technologies in a sophisticated, multi-cloud environment.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Drive inbound and outbound business development for a cybersecurity services company. Identify prospects, conduct outreach through email, calls, and social media, qualify leads, book meetings, support new-account pursuits, and communicate prospect needs internally. Manage lead funnels, support marketing activities, improve outreach messaging, track performance metrics, and consistently achieve qualified-lead quotas.

Lead security strategy, architecture, and DevSecOps for a large-scale TDIR product. Embed security across SDLC, design secure architectures, drive threat modeling, implement security controls and IaC, improve detection/observability, respond to incidents, and support compliance and customer security processes.

Design and implement backend components and a high-throughput data pipeline processing terabytes/day. Ensure performance, reliability, and cost-efficiency. Drive engineering best practices (testing, observability, CI/CD), operate cloud-native infrastructure, and mentor engineers while collaborating across teams.

Monitor and investigate security alerts, triage incidents to meet SLAs, develop detections and rules, perform threat hunting and forensics, draft client incident reports, and improve MXDR detection, automation, and visibility.

Perform forensic analysis and incident response for advanced attacks, including host and network forensics, malware analysis, threat hunting, tool development, collaboration with client IT/security teams, and producing investigative reports.

Conduct open- and dark-web threat monitoring and investigations, analyze external attack surface and data exposures, detect brand abuse and phishing, leverage ASM/DRP tools, build automation and AI-driven collection using Python, produce intelligence reports, present findings to clients, and support incident response teams.

Lead product vision, strategy, and roadmap for the Velocity TDIR platform. Drive evolution to an AI-powered MDR/Security Operations platform, partner with security and engineering teams, engage customers, prioritize product investments, and measure adoption, analyst efficiency, and market differentiation.

Lead client portfolio and business development across Israel and MENA, act as trusted advisor to senior technical and executive stakeholders, drive revenue targets, identify and scope engagements, collaborate with engagement teams on deliverables, and contribute to capability and strategy development.

Serve as the primary bilingual (Spanish/English) Customer Success Manager for incident response readiness customers across NA and LATAM. Lead onboarding, build success plans, drive engagement and value realization, monitor health, own renewal readiness, and coordinate cross-functional teams to maximize retention and service utilization.

Design and implement backend components for an XDR platform, build a lightweight cross-platform endpoint agent in Rust, develop a Python-based C&C server (Flask/async), maintain distributed systems, work with Docker/Kubernetes and cloud (AWS), improve CI/CD, collaborate across teams, and mentor engineers.