Jobs at Sygnia

Conduct open- and dark-web threat monitoring and investigations, analyze external attack surface and data exposures, detect brand abuse and phishing, leverage ASM/DRP tools, build automation and AI-driven collection using Python, produce intelligence reports, present findings to clients, and support incident response teams.

Lead product vision, strategy, and roadmap for the Velocity TDIR platform. Drive evolution to an AI-powered MDR/Security Operations platform, partner with security and engineering teams, engage customers, prioritize product investments, and measure adoption, analyst efficiency, and market differentiation.

Design, build, and maintain data warehouses and ETL pipelines; extract, clean, transform, and model data; create dashboards and reports in Power BI; collaborate with stakeholders and executives; drive AI-powered analytics and automation within BI processes.

Lead adversary simulation and red/purple team engagements to identify vulnerabilities, validate incident response, and improve client resiliency. Design and execute internal/external attacks, phishing and social engineering campaigns, evade EDR/XDR, develop or modify exploits and tools, and present findings to stakeholders. Support incident response and learn/apply new TTPs.

Design and implement backend components for an XDR platform, build a lightweight cross-platform endpoint agent in Rust, develop a Python-based C&C server (Flask/async), maintain distributed systems, work with Docker/Kubernetes and cloud (AWS), improve CI/CD, collaborate across teams, and mentor engineers.

Lead and perform end-to-end forensic investigations and incident response for complex cyberattacks. Conduct log, host, network, memory, and malware analysis; threat hunt for APTs; identify IOCs/TTPs; use and improve investigation tooling and playbooks; communicate findings and recommendations to technical and executive stakeholders.

Lead security strategy, architecture, and DevSecOps for a large-scale TDIR product. Embed security across SDLC, design secure architectures, drive threat modeling, implement security controls and IaC, improve detection/observability, respond to incidents, and support compliance and customer security processes.

Build and lead Sygnia's Customer Success function while managing strategic enterprise customers end-to-end. Drive adoption, retention, and expansion, monitor customer health, handle escalations and post-incident activities, influence product roadmap, define success methodologies, and recruit and scale a global Customer Success team.

Design and implement backend components and a high-throughput data pipeline processing terabytes/day. Ensure performance, reliability, and cost-efficiency. Drive engineering best practices (testing, observability, CI/CD), operate cloud-native infrastructure, and mentor engineers while collaborating across teams.

Monitor and investigate security alerts, triage incidents to meet SLAs, develop detections and rules, perform threat hunting and forensics, draft client incident reports, and improve MXDR detection, automation, and visibility.