Jobs at Sygnia

Leads incident response investigations and security assessment projects for global clients. Manages and mentors cybersecurity researchers and forensic experts, directs complex threat investigations, collaborates with client IT and security teams, and improves incident response technologies, methodologies, and processes. The role requires hands-on expertise in threat analysis, network and log analysis, computer forensics, malware analysis, reverse engineering, SIEM platforms, cloud environments, and executive-level reporting.

Conduct end-to-end forensic investigations and incident response for sophisticated cyberattacks, ransomware, and nation-state activity. Responsibilities include log, host, network, malware, and memory analysis; threat hunting; IOC and TTP identification; client communication; technical reporting; and improving investigative tools and methodologies.

Conduct advanced post-breach monitoring, alert triage, host forensics, threat hunting, and custom detection development across client environments. Support incident response, maintain endpoint, cloud, and network visibility, automate triage and reporting workflows, and collaborate with client security teams. The role requires SIEM expertise, knowledge of threat actors and attack techniques, network and host-based analysis, Python scripting, and occasional travel or work outside normal hours.

Leads an MDR team supporting 24/7 security operations. Responsibilities include managing analysts and shifts, escalating complex investigations, monitoring SLA performance, conducting forensic analysis, tuning detections, reviewing reports, communicating with clients during incidents, maintaining runbooks, and improving MDR processes. The role also coordinates transitions to incident response and acts for the MDR Site Manager when needed.

Lead onboarding of global clients to managed MDR services, develop detection scenarios and alerts, monitor and improve XDR capabilities, analyze client environments, and provide technical cybersecurity guidance. The role requires hands-on experience with SIEM, EDR, XDR, log ingestion, data-source integrations, Linux, databases, threat detection, and global client support.

Leads APAC incident response and threat-hunting engagements involving sophisticated cyberattacks. Directs investigations, evidence collection, containment, remediation, technical specialists, crisis communications, and executive client relationships. The role requires defensible risk-based decisions, cross-functional project leadership, methodology development, business development, and availability for urgent engagements outside regular hours. International travel is required as needed.

Build and deploy practical AI solutions, including AI agents, agentic workflows, LLM integrations, and business automations. Partner with cross-functional teams to identify opportunities, evaluate AI platforms, architect enterprise integrations, optimize prompts, and lead initiatives from prototyping through production. Ensure solutions are scalable, secure, governed, and aligned with business outcomes while communicating effectively with technical and business stakeholders.

Own the enterprise sales cycle from qualification through close, converting cybersecurity service opportunities into new-logo revenue. Build relationships with technical and executive stakeholders, lead client meetings and proposals, negotiate agreements, maintain forecasts, and coordinate transitions into delivery. Manage early commercial expansion for new clients, collaborate with technical, marketing, business development, and partner teams, and contribute market and competitive insights. Travel within the United States approximately 20% of the time.

Own and grow named North American accounts by developing cybersecurity service opportunities, building executive and technical relationships, managing the sales process, and achieving revenue targets. The role involves account planning, opportunity qualification, proposal development, negotiation, closing, client presentations, and collaboration with technical and engagement teams. Travel within the United States is approximately 20 percent.

Leads client onboarding and integration for Sygnia’s MDR services, configuring Velocity XDR detection scenarios, alerts, data sources, and monitoring. Analyzes enterprise environments, troubleshoots integrations, tracks security KPIs, supports clients, and improves detection, visibility, automation, and operational efficiency. Collaborates with MDR analysts, incident responders, and platform teams while staying current with threats and attack techniques.

Lead incident response and threat-hunting engagements for clients across EMEA, managing cross-functional cybersecurity, forensic, and research teams during sophisticated attacks. The role includes crisis management, client and executive communication, technical leadership, methodology development, global coordination, relationship management, business development, and thought leadership. The manager must provide decisive leadership during urgent incidents and may work outside normal hours or travel internationally.

Designs and manages secure, scalable AWS infrastructure, Kubernetes clusters, GitOps-based CI/CD pipelines, and infrastructure-as-code workflows. Implements DevSecOps, monitoring, logging, observability, and operational automation across development, staging, and production environments. Partners with developers, mentors engineers, influences platform architecture, and supports mission-critical systems through on-call participation and continuous improvement.

Develop and maintain Python backend services, optimize complex Snowflake SQL queries, and perform data engineering for a threat detection platform. Contribute across the full stack using ReactJS, support cloud infrastructure and CI/CD practices, troubleshoot platform components, and participate in agile development, architecture decisions, and technical direction.

Design and develop production-grade generative AI applications and agentic systems. Build secure, scalable, observable AI services using Python, Docker, and cloud technologies, while applying testing, evaluation, CI/CD, and troubleshooting best practices. Collaborate with researchers to transform prototypes into reliable containerized cloud applications. Contribute to technical innovation, product development, and engineering standards across GenAI solutions.

Provides internal help desk support to end users, troubleshooting desktop applications, workstations, mobile devices, and related equipment. Installs and tests computer equipment, supports Windows and Microsoft 365 environments, maintains hardware and software license inventories, and promotes IT support best practices. The role requires strong communication, customer service, independent problem-solving, and the ability to learn new technologies in a sophisticated, multi-cloud environment.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Drive inbound and outbound business development for a cybersecurity services company. Identify prospects, conduct outreach through email, calls, and social media, qualify leads, book meetings, support new-account pursuits, and communicate prospect needs internally. Manage lead funnels, support marketing activities, improve outreach messaging, track performance metrics, and consistently achieve qualified-lead quotas.

Lead security strategy, architecture, and DevSecOps for a large-scale TDIR product. Embed security across SDLC, design secure architectures, drive threat modeling, implement security controls and IaC, improve detection/observability, respond to incidents, and support compliance and customer security processes.

Monitor and investigate security alerts, triage incidents to meet SLAs, develop detections and rules, perform threat hunting and forensics, draft client incident reports, and improve MXDR detection, automation, and visibility.

Perform forensic analysis and incident response for advanced attacks, including host and network forensics, malware analysis, threat hunting, tool development, collaboration with client IT/security teams, and producing investigative reports.