Jobs at Sygnia

Lead client portfolio and business development across Israel and MENA, act as trusted advisor to senior technical and executive stakeholders, drive revenue targets, identify and scope engagements, collaborate with engagement teams on deliverables, and contribute to capability and strategy development.

Serve as the primary bilingual (Spanish/English) Customer Success Manager for incident response readiness customers across NA and LATAM. Lead onboarding, build success plans, drive engagement and value realization, monitor health, own renewal readiness, and coordinate cross-functional teams to maximize retention and service utilization.

Lead and manage complex incident response engagements and threat hunting, oversee forensic teams, advise C-level stakeholders, coordinate containment and remediation, and improve IR methodologies and reporting.

Lead adversary simulation and red/purple team engagements to identify vulnerabilities, validate incident response, and improve client resiliency. Design and execute internal/external attacks, phishing and social engineering campaigns, evade EDR/XDR, develop or modify exploits and tools, and present findings to stakeholders. Support incident response and learn/apply new TTPs.

Design and implement backend components for an XDR platform, build a lightweight cross-platform endpoint agent in Rust, develop a Python-based C&C server (Flask/async), maintain distributed systems, work with Docker/Kubernetes and cloud (AWS), improve CI/CD, collaborate across teams, and mentor engineers.

Lead and perform end-to-end forensic investigations and incident response for complex cyberattacks. Conduct log, host, network, memory, and malware analysis; threat hunt for APTs; identify IOCs/TTPs; use and improve investigation tooling and playbooks; communicate findings and recommendations to technical and executive stakeholders.

Lead security strategy, architecture, and DevSecOps for a large-scale TDIR product. Embed security across SDLC, design secure architectures, drive threat modeling, implement security controls and IaC, improve detection/observability, respond to incidents, and support compliance and customer security processes.

Design and implement backend components and a high-throughput data pipeline processing terabytes/day. Ensure performance, reliability, and cost-efficiency. Drive engineering best practices (testing, observability, CI/CD), operate cloud-native infrastructure, and mentor engineers while collaborating across teams.

Monitor and investigate security alerts, triage incidents to meet SLAs, develop detections and rules, perform threat hunting and forensics, draft client incident reports, and improve MXDR detection, automation, and visibility.

Perform forensic analysis and incident response for advanced attacks, including host and network forensics, malware analysis, threat hunting, tool development, collaboration with client IT/security teams, and producing investigative reports.

Conduct open- and dark-web threat monitoring and investigations, analyze external attack surface and data exposures, detect brand abuse and phishing, leverage ASM/DRP tools, build automation and AI-driven collection using Python, produce intelligence reports, present findings to clients, and support incident response teams.

Lead product vision, strategy, and roadmap for the Velocity TDIR platform. Drive evolution to an AI-powered MDR/Security Operations platform, partner with security and engineering teams, engage customers, prioritize product investments, and measure adoption, analyst efficiency, and market differentiation.