Teams at Sygnia

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Evaluate on-premises, cloud, hybrid, network, endpoint, application, identity, and infrastructure security. Identify risks and gaps, create reports, present recommendations, and support incident response and post-incident improvements. Collaborate with engagement managers and technical teams while communicating with English- and Spanish-speaking stakeholders. Travel approximately 20% for client engagements.

Designs, validates, and optimizes detection logic across endpoint, identity, cloud, email, and network environments. Researches threats and attacker TTPs, develops MITRE ATT&CK and ATLAS coverage, analyzes telemetry, and improves data quality and alert performance. Builds testing frameworks and lab environments for attack simulations, develops AI-powered detection automation, troubleshoots noisy detections, and creates client-specific content. Collaborates with MDR Operations, Product, Engineering, and Threat Research teams to improve detection effectiveness and reduce alert fatigue.

Leads complex incident response and forensic investigations, including threat hunting, malware analysis, log and network analysis, host forensics, and attack assessment. The role includes technical leadership, client communication, report presentation, tool and methodology development, hiring participation, and collaboration with IT and security teams. Approximately 30% international travel is required.