JOIN THE TEAM BEHIND THE WORLD’S MOST CYBER-READY ORGANIZATIONS

About Sygnia 

Sygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset. 

Our services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as financial services, healthcare, technology, manufacturing, and critical infrastructure. 

With a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most. 

The Role 

Sygnia is seeking a Cyber Security Consultant to join our growing Enterprise Security team in the United States. This is a highly technical consulting role focused on helping organizations assess, strengthen, and mature their cybersecurity programs through proactive security assessments and strategic advisory engagements. 

You will work alongside some of the industry's leading cybersecurity experts to evaluate enterprise environments, identify security risks, and provide practical recommendations that improve security posture across on-premises, cloud, and hybrid infrastructures. 

This is primarily a delivery-focused consulting role. Client relationship ownership is managed by Engagement Managers, allowing you to focus on delivering exceptional technical work while partnering closely with internal teams to ensure successful client outcomes. 

Experience with Operational Technology (OT) and Industrial Control Systems (ICS) environments is highly valued as Sygnia continues expanding its capabilities across critical infrastructure and industrial sectors, though it is not required. 

What You'll Do 

• Assess clients' security posture, enterprise architecture, technical configurations, and security controls to identify risks, gaps, and opportunities for improvement.  
• Deliver proactive cybersecurity consulting engagements, including security assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance.  
• Develop clear, actionable reports and present findings and recommendations to both technical teams and executive stakeholders.  
• Provide practical guidance to help clients strengthen their security programs using industry best practices and risk-based recommendations.  
• Support security incident response engagements and post-incident improvement initiatives as needed, representing approximately 20% of the role.  
• Collaborate closely with Engagement Managers and technical specialists to ensure successful project delivery and exceptional client experience.  
• Contribute to Sygnia's consulting methodologies, assessment frameworks, and internal knowledge sharing initiatives.  
• Stay current on emerging threats, security technologies, and industry best practices to continuously enhance consulting capabilities.  
• Support assessments involving cloud environments, identity security, enterprise infrastructure, and, when applicable, Operational Technology (OT) environments. 

What We're Looking For 

• At least five years of experience as a cybersecurity professional.  
• Previous hands-on experience in one or more technical cybersecurity disciplines such as security engineering, security architecture, cloud security, application security, infrastructure security, network security, or similar technical roles.  
• Experience performing Operational Technology (OT) or Industrial Control Systems (ICS) security assessments.  
• Strong understanding of enterprise security architecture, security design principles, and modern security controls across on-premises and cloud environments.  
• Demonstrated experience assessing complex technical environments, identifying security gaps, and providing practical, risk-based recommendations.  
• Strong client-facing consulting skills, including the ability to clearly communicate technical concepts to both technical and executive audiences.  
• Excellent written communication skills with experience developing professional assessment reports and technical deliverables.  
• Strong analytical and problem-solving abilities with a structured, consultative approach.  
• Comfortable working independently while collaborating across cross-functional technical teams.  
• Willingness to travel approximately 20% for client engagements.  
• Bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline. 

Bonus Points For 

• Experience delivering cybersecurity consulting or professional services engagements.  
• Strong knowledge of ICS/OT security architecture, with hands-on experience implementing and configuring cybersecurity controls and industry standards. 
• Familiarity with industrial control environments, manufacturing, utilities, energy, or critical infrastructure, including standards such as IEC62443 and NERC-CIP. 
• Relevant certifications such as CISSP, OSCP, CEH, CCSP, CCSK, GIAC certifications, cloud security certifications, or equivalent technical expertise.  
• Experience presenting findings and recommendations to senior leadership or executive stakeholders.  
• Knowledge of industry frameworks such as NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, or similar cybersecurity standards. 
• Fluency in Spanish.

Why Sygnia 

Joining Sygnia means working alongside some of the world's most respected cybersecurity professionals on complex engagements that help organizations strengthen their resilience against evolving cyber threats. 

You will have the opportunity to: 

• Solve complex security challenges for leading global organizations.  
• Work alongside experts in incident response, adversarial tactics, enterprise security, and cyber strategy.  
• Gain exposure to diverse industries, technologies, and enterprise environments.  
• Continue developing your technical expertise through challenging consulting engagements and continuous learning.  
• Help organizations improve their security posture before incidents occur and make a measurable impact on their long-term resilience. 

About Sygnia 

Sygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset. 

Our services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as financial services, healthcare, technology, manufacturing, and critical infrastructure. 

With a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most. 

The Role 

Sygnia is seeking a Cyber Security Consultant to join our growing Enterprise Security team in the United States. This is a highly technical consulting role focused on helping organizations assess, strengthen, and mature their cybersecurity programs through proactive security assessments and strategic advisory engagements. 

You will work alongside some of the industry's leading cybersecurity experts to evaluate enterprise environments, identify security risks, and provide practical recommendations that improve security posture across on-premises, cloud, and hybrid infrastructures. 

This is primarily a delivery-focused consulting role. Client relationship ownership is managed by Engagement Managers, allowing you to focus on delivering exceptional technical work while partnering closely with internal teams to ensure successful client outcomes. 

Approximately 20% of the role will involve supporting security incident response engagements and post-incident improvement initiatives. Prior incident response experience is helpful but not required.

Professional fluency in Spanish is required, as the role will involve client-facing work with Spanish-speaking stakeholders.

What You'll Do 

• Assess clients' security posture, enterprise architecture, technical configurations, and security controls to identify risks, gaps, and opportunities for improvement.  
• Deliver proactive cybersecurity consulting engagements, including security assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance.  
• Evaluate security across enterprise IT environments, including cloud platforms, identity and access management, networks, endpoints, infrastructure, applications, and security technologies.
• Develop clear, actionable reports and present findings and recommendations to both technical teams and executive stakeholders.  
• Provide practical risk-based guidance to help clients strengthen their security programs.
• Support security incident response engagements and post-incident improvement initiatives as needed, representing approximately 20% of the role.  
• Collaborate closely with Engagement Managers and technical specialists to ensure successful project delivery and exceptional client experience.  
• Communicate findings and recommendations in both English and Spanish when working with Spanish-speaking clients and stakeholders.
• Contribute to Sygnia's consulting methodologies, assessment frameworks, and internal knowledge sharing initiatives.  
• Stay current on emerging threats, security technologies, and industry best practices to continuously enhance consulting capabilities. 

What We're Looking For 

• At least five years of experience in cybersecurity, security consulting, security engineering, security architecture, cloud security, infrastructure security, network security, or related technical field.
• Hands-on experience assessing enterprise IT environments, security architectures, technical configurations, and security controls.
• Strong understanding of enterprise security architecture, security design principles, and modern security controls across on-premises and cloud environments.  
• Demonstrated ability to identifying security gaps, and providing practical, risk-based recommendations.  
• Strong client-facing consulting skills, including the ability to clearly communicate technical concepts to both technical and executive audiences.  
• Professional fluency in Spanish and English, with the ability to communicate effectively with Spanish-speaking clients in a technical and consulting context.
• Excellent written communication skills with experience developing professional assessment reports and technical deliverables.  
• Strong analytical and problem-solving abilities with a structured, consultative approach.  
• Comfortable working independently while collaborating across cross-functional technical teams.  
• Willingness to travel approximately 20% for client engagements.  
• Bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline. 

Bonus Points For 

• Experience delivering cybersecurity consulting or professional services engagements.  
• Experience supporting security incident response engagements, post-incident reviews, or security investigations.
• Relevant certifications such as CISSP, OSCP, CEH, CCSP, CCSK, GIAC certifications, cloud security certifications, or equivalent technical expertise.  
• Experience presenting findings and recommendations to senior leadership or executive stakeholders.  
• Knowledge of industry frameworks such as NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, or similar cybersecurity standards. 

Why Sygnia 

Joining Sygnia means working alongside some of the world's most respected cybersecurity professionals on complex engagements that help organizations strengthen their resilience against evolving cyber threats. 

You will have the opportunity to: 

• Solve complex security challenges for leading global organizations.  
• Work alongside experts in incident response, adversarial tactics, enterprise security, and cyber strategy.  
• Gain exposure to diverse industries, technologies, and enterprise environments.  
• Continue developing your technical expertise through challenging consulting engagements and continuous learning.  
• Help organizations improve their security posture before incidents occur and make a measurable impact on their long-term resilience. 

Sygnia is a top tier cyber consulting and incident response company that partners with organizations worldwide to proactively build their cyber resilience and respond to advanced threats. We work closely with security and IT teams, senior leadership, and boards to help organizations prepare for, withstand, and recover from cyber-attacks with confidence. 

Sygnia brings together top cyber security talent from across the industry, combining deep technical expertise with a practical, business focused approach. We support clients at every stage of their security journey through proactive consulting, incident response, and ongoing security services. 

Sygnia is looking for an experienced Cyber Security Consulting Manager, also known as an Engagement Manager, to lead proactive consulting engagements with clients worldwide. This role is responsible for the full lifecycle of engagements, from planning through execution and final delivery, ensuring strong client outcomes and measurable impact. 

You will lead consulting teams, manage client relationships, and serve as a trusted advisor to senior stakeholders. This role is well suited for someone who combines strong cyber security expertise with leadership, communication, and client-facing experience.  

Why Sygnia 

At Sygnia, you will work alongside experienced cyber security professionals on high impact engagements with leading organizations around the world. You will have the opportunity to lead meaningful consulting work, engage directly with senior client stakeholders, and contribute to solutions that address real world security challenges. 

We offer a collaborative and fast paced environment where you can grow your expertise, take on increasing responsibility, and play a key role in shaping how organizations strengthen their cyber resilience. 

Main Reponsebilities:

• Lead teams of cyber security consultants in delivering proactive security assessments and resilience focused engagements.  
• Manage multiple engagements in parallel, both remotely and on client sites. 
• Own the end-to-end delivery of engagements, ensuring alignment with scope, objectives, timelines, budget, and client expectations. 
• Develop and present status updates and summary reports to a wide range of audiences, including technical teams, and executive stakeholders such as CISOs, CIOs, and CTOs. 
• Serve as the primary point of contact for clients, acting as a trusted advisor before, during, and after engagements. 
• Lead and support business development activities, including client discussions, and identifying new opportunities. 
• Contribute to internal capability building, methodology development, and strategic initiatives. 

Main Rrquirements:

• At least five years of experience managing complex, client-facing cyber security engagements, with a proven track record of delivery. 
• Strong understanding of cyber security, security governance, and cyber risk management frameworks and best practices. 
• Ability to work effectively in a matrix organization and collaborate across teams and departments.  
• Strong analytical, creative, and problem-solving skills, with the ability to manage complexity and uncertainty. 
• Excellent communication and presentation skills, with the ability to engage both technical and non technical stakeholders, including senior leadership. 
• Strong attention to detail and a commitment to high quality delivery. 
• Willingness to travel internationally approximately 10%-15% of the time for client engagements. 

Bonus Points For 

• Experience working with large multinational organizations. 
• Certifications such as C-CISO, CISM, PMP, or similar. 
• Familiarity with regulatory requirements and compliance standards such as NIST, ISO, or similar frameworks. 
• Spanish language proficiency. 

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Cyber threats are constantly growing in volume, velocity and sophistication. When an organization is confronted with an advanced attack, it needs the strongest capabilities on its side. In many cases, an incident response engagement is in fact a battle within a network. The operational art, experience focus and speed of Sygnia response teams can mean the difference between a minor blow and a devastating impact on performance and reputation of organizations.

We are looking for a hands-on AI Solutions Engineer who combines practical AI expertise with strong business applications, integration and automation capabilities. The ideal candidate will be able to identify organizational needs and translate them into scalable AI solutions, including AI agents, agentic workflows and deterministic integrations. They will drive the effective adoption of AI across the company by developing practical solutions that improve processes, productivity, decision-making and overall business impact.

Main Responsibilities:

• Partner with cross-functional teams to identify high-impact AI and automation opportunities.
• Evaluate and select AI models, platforms, and tools (e.g., OpenAI, Claude, Azure AI, AWS Bedrock) based on use case, performance, cost, security, and scalability.
• Design and implement AI solutions combining LLMs, AI agents, and deterministic integrations (e.g., Workato).
• Build and optimize prompts, agentic workflows, and integrations while understanding model limitations and trade-offs.
• Architect scalable integrations across enterprise systems such as NetSuite, HubSpot, Monday.com, and other internal platforms.
• Lead AI initiatives end-to-end, from ideation and prototyping through production rollout and continuous improvement.
• Evaluate emerging AI capabilities and new AI features within existing enterprise platforms.
• Own and communicate the company's internal AI solutions, ensuring alignment with business needs, systems, and broader AI architecture.

Main Requirements:

• 3+ years of experience with business applications and integrations.
• 1+ years of hands-on experience building or implementing AI solutions.
• Strong practical experience with AI platforms such as OpenAI, Claude, Azure Open AI, and AWS Bedrock.
• Hands-on experience with AI development, automation, and integration tools, including Workato or similar iPaaS platforms.
• Strong understanding of prompt engineering, LLM capabilities and limitations.
• Proven ability to take AI solutions from concept and prototype through production.
• Understanding of security best practices, AI safety, responsible AI, and governance.
• Strong problem-solving and solution-oriented mindset, with a focus on practical business outcomes.
• Excellent communication and presentation skills, with the ability to work cross-functionally and translate between business and technical stakeholders.

FP&A Analyst

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force," Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Our FP&A team is growing and we are looking for an experienced FP&A Analyst to join the finance team. this function will report to the FP&A Director in Israel.

Main responsibilities

• Monitor and analyze performance KPIs and metrics to support and measure achievement of the company’s strategy and operational plans.
• Provide management and business leaders with visibility and analysis of the company’s business trends to support business decisions.
• Provide periodic and ad-hoc analysis and reporting and analysis.
• Prepare annual budget, collaborate with all budget owners and stakeholders to achieve reliable planning and full visibility of the company’s business and performance.
• Track and analyze actual performance vs budget.
• Lead multiple projects simultaneously and prioritize them based on clear goals and business needs.
• Use AI tools and automation, including lightweight AI agents and workflows, to optimize FP&A activities such as data gathering, reconciliations, variance analysis, forecasting and management reporting, improving data quality and reducing manual work with appropriate human review and controls.

• +3 years of experience as FP&A, within a global high growth company
•  Bachelor’s degree in Economics, Accounting, Business Management or other relevant field
•  Positive attitude, ability to work independently, self-learn and adapt to a fast-changing environment
• A pleasant yet assertive business partner to the company management and budget owners
• Strong analytical and problem-solving skills
• Ability to manage multiple priorities and communicate complex analyses and models in a clear and simple way.
• Hands-on; highly organized, detail-oriented, and mindful to deadlines
•  Advanced knowledge of Microsoft Excel – a must
•  Experience working with relevant software and systems: Netsuite, PowerBI, Hubspot – advantage.
• Practical experience using generative AI tools, workflow automation platforms or building AI agents to turn repetitive FP&A activities into efficient, scalable and well-controlled automated processes.
• Curiosity and willingness to learn new AI capabilities and apply them responsibly to confidential financial and business data.
• Fluent English – written and verbal.

About Sygnia

Sygnia is a top-tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. We work with companies to proactively build their cyber resilience and to respond to and defeat attacks within their networks. Sygnia is the trusted advisor and cybersecurity service provider for IT and security teams, senior managements, and boards of leading organizations around the world, including Fortune 100 companies.

Our team combines top talent from elite military technology units and across the cyber industry. We bring technological expertise, digital combat experience, data analytics and a business-driven mindset to cybersecurity, enabling organizations to thrive in the face of cyber threats.

The Role

We are looking for an Advanced Monitoring Expert to join our team of cybersecurity analysts. In this role, you will conduct advanced and tailored monitoring activities in post-breach client environments. You will develop detection analyses, triage alerts, investigate security incidents, and perform proactive threat hunting. The role also involves onboarding new clients, working closely with incident response teams, and enhancing visibility and detection capabilities.

This position is ideal for someone who enjoys working in dynamic environments, has strong problem-solving skills, and thrives when collaborating with clients and teammates.

What You’ll Do

• Perform post-breach monitoring in client environments, including triage of alerts and host forensics analysis.
• Develop custom detection and analysis methods to monitor client environments, often based on known threat actor tactics, techniques, and procedures (TTPs).
• Support major incident response engagements by delivering accurate detection when active threats are suspected.
• Maintain visibility and log forwarding across endpoints, cloud environments, and network devices.
• Conduct proactive threat hunting using host- and network-based analysis, malware hunting, and IOC searches.
• Create automation tools and capabilities for alert triage, escalation, visibility management, and reporting.
• Collaborate with client security teams, providing regular updates and follow-ups on alerts and security events.
• Generate reports and metrics on incidents, trends, visibility status, and response procedures.

What We’re Looking For

• 3-5 years of experience in cybersecurity roles within SOC, SecOps, or security monitoring environments.
• Strong analytical thinking and problem-solving skills, with the ability to work independently.
• Strong understanding of the lifecycle of advanced security threats, attack vectors, and exploitation techniques.
• Hands-on experience with SIEM tools such as Splunk, QRadar, ArcSight, or Exabeam.
• Knowledge of common data and log sources for detection and analysis, including Event Logs, Firewalls, and EDR tools.
• Technical understanding of network fundamentals, common Internet protocols, and security controls.
• Familiarity of host-based forensics and OS artifacts.
• Proficiency in scripting languages such as Python.
• Experience with cloud infrastructure, web applications, or servers is a plus.
• Strong customer-facing communication skills.
• Willingness to work outside normal hours and travel occasionally.

Bonus Points For

• Experience developing custom detection logic or automation workflows.
• Previous involvement in incident response or digital forensics investigations.
• Familiarity with threat intelligence platforms or red-team engagements.
• Security certifications such as GCIA, GCIH, or OSCP.

Why Sygnia

At Sygnia, you will work alongside some of the most talented professionals in the cybersecurity industry. We offer the opportunity to solve complex security challenges for global organizations while continuing to grow your expertise. Our culture values innovation, teamwork, and professional growth, making Sygnia an exciting place to build your career.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Cyber threats are constantly growing in volume, velocity and sophistication. When an organization is confronted with an advanced attack, it needs the strongest capabilities on its side. In many cases, an incident response engagement is in fact a battle within a network. The operational art, experience focus and speed of Sygnia response teams can mean the difference between a minor blow and a devastating impact on performance and reputation of organizations.

Sygnia is looking for highly capable Incident Response Expert. The Incident Response Expert role includes conducting in-depth forensic analysis, investigation and response to real-world cyber threats. A significant part of our investigations is performed onsite at the client location, in collaboration with the client’s IT and security teams.

Main Responsibilities

• Participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics and malware analysis.
• Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations.
• Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
• Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack.
• Collaborate with IT and Security teams during investigations.
• Generate and present a comprehensive and professional report of findings from investigations.

Main Requirements:

• At least 3 years of a relevant experience (from military service and/or industry).
• Bright, curious and determined team player, who strive for excellency.
• Problem solver, in-depth thinker with growth mindset.
• Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
• Deep technical understanding of network fundamentals and common Internet protocols.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
• Fluency with one or more scripting language (i.e. Python).
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
• Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight).
• Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.

About Sygnia

Sygnia is a premier cyber technology and services company providing high-impact incident response, cyber resilience consulting, and threat hunting for leading organizations across the globe. Trusted by Fortune 100 companies and government entities alike, Sygnia draws its strength from a team of elite professionals with backgrounds in military-grade cyber operations and the global cybersecurity industry.

Sygnia is rapidly expanding its presence in the United States, growing our incident response capabilities and client base across key industries. Joining now means playing a formative role in shaping our U.S. operations while benefiting from the backing and expertise of an established global leader.

The Role

We are seeking a highly skilled and motivated Incident Response Expert to join our elite global team. In this role, you will lead and participate in complex forensic investigations and incident response engagements involving sophisticated cyberattacks, ransomware events, and nation-state activity. Your expertise will play a critical role in helping Sygnia’s clients understand, contain, and recover from cyber incidents while preserving business continuity and mitigating risk.

What You’ll Do

• Work with a team to conduct end-to-end forensic investigations, including log analysis, host and network forensics, malware triage, and memory analysis.
• Support response efforts for major cybersecurity incidents, collaborating closely with internal and external security and IT teams.
• Perform threat hunting activities in client environments to detect and eliminate advanced persistent threats.
• Identify Indicators of Compromise (IOCs) and attacker Tactics, Techniques, and Procedures (TTPs) using frameworks like MITRE ATT&CK.
• Analyze a wide variety of data sources (endpoint, network, SIEM, etc.) to build a clear picture of the attacker’s actions and impact.
• Leverage and contribute to Sygnia’s internal investigation tools, playbooks, and threat intelligence platforms.
• Communicate investigation results effectively to both technical stakeholders and executive leadership.
• Develop and present high-quality technical reports, timelines, and strategic recommendations to clients.
• Support the continuous improvement of internal methodologies, tooling, and knowledge sharing within the team.

What We’re Looking For

• 3+ years of hands-on experience in incident response, digital forensics, threat hunting, or cyber investigations—whether from the private sector, military, or government.
• Deep technical understanding of operating systems (Windows, Linux, macOS), file systems, registry and memory structures, and log analysis.
• Proficiency in network fundamentals and common protocols (DNS, HTTP/S, SMB, etc.) and network traffic analysis (e.g., PCAP review).
• Experience with tools such as EnCase, X-Ways, FTK, Velociraptor, Splunk, or Wireshark, and EDR platforms like CrowdStrike, SentinelOne, or Microsoft Defender.
• Competency in scripting or automation (e.g., Python, PowerShell) to support investigations.
• Familiarity with cloud environments (AWS, Azure, GCP) and related forensic techniques is a plus.
• Excellent written and verbal communication skills; able to clearly convey complex technical topics to diverse audiences.
• Strong analytical thinking, attention to detail, and ability to work under pressure in time-sensitive environments.
• Willingness to travel.

Bonus Points For

• Industry-recognized certifications (e.g., GCFA, GCIH, GNFA, GCIA, GREM, CISSP).
• Experience responding to ransomware, business email compromise (BEC), and advanced threat actor incidents.
• Experience presenting findings to legal counsel, regulators, or board-level stakeholders.
• Multilingual skills and experience in multinational or cross-cultural environments.
• A degree in Computer Science, Information Security, or a related field; or equivalent education or training in cybersecurity

Why Sygnia

• Be part of Sygnia’s continued growth in the U.S., with opportunities to influence how we scale our team, capabilities, and operations in a rapidly expanding market.
• Work with some of the best minds in cybersecurity on the world’s most high-impact cases.
• Operate in a fast-paced, elite-tier environment where your technical expertise is trusted and valued.
• Take part in meaningful, challenging work that directly shapes the outcomes for Fortune 500 organizations.
• Grow your career while staying hands-on in incident response and mentoring a highly capable team.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across EMEA. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within Sygnia.

Main Responsibilities

• Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
• Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IRM outside the scope of the project.
• Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within Sygnia.
• Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders.
• Serve as a trusted advisor to clients during high-pressure and business-critical situations.
• Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions.
• Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services.
• Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
• Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

Main Requirements

• At least 5 years of experience leading teams through direct management, project-based leadership, matrix management, or a combination of these models.
• Proven ability to lead diverse groups of specialists who do not report directly to the role, while maintaining alignment, accountability, and effective execution.
• A decisive, intellectually sharp, and positive leader with a strong commitment to excellence.
• Calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments.
• Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities.
• Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to both technical professionals and executive leadership. Additional languages are an advantage.
• In-depth understanding of advanced cyber threats, attack vectors, adversary techniques, and exploitation methods.
• Strong technical knowledge of network fundamentals, common internet protocols, operating systems, and security controls.
• Familiarity with the tools and techniques used in security event analysis, incident response, digital forensics, malware analysis, and broader security operations.
• Ability to work in a project-based model involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required.
• Willingness to travel internationally as needed.
• Previous experience in strategy or cybersecurity consulting is an advantage.
• An academic degree in a technological or scientific discipline is an advantage.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across APAC. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within Sygnia.

Main Responsibilities

• Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
• Support the investigation strategy and technical direction of engagements, ensuring that evidence collection, analysis, containment, and remediation activities address the client’s most critical risks and business priorities.
• Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IR Manager outside the scope of the project.
• Critically assess technical findings, challenge assumptions, identify investigative gaps, and guide the team toward clear and defensible conclusions.
• Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within Sygnia.
• Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders.
• Serve as a trusted advisor to clients during high-pressure and business-critical situations.
• Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions.
• Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services.
• Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
• Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

Main Requirements

• At least five years of relevant leadership experience in incident response, cybersecurity consulting, crisis management, or a comparable technical environment.
• Demonstrated ability to lead technically complex investigations, evaluate evidence, guide specialists, make risk-based decisions, and communicate defensible conclusions.
• Proven ability to lead diverse groups of specialists who do not report directly to the role while maintaining alignment, accountability, and effective execution.
• A decisive, intellectually sharp, and positive leader with a strong commitment to excellence.
• A calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments.
• Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities.
• Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to technical professionals and executive leadership. Additional languages are an advantage.
• Strong technical understanding of advanced cyber threats, attack vectors, adversary techniques, exploitation methods, and incident response methodologies.
• Ability to assess technical findings, identify gaps or unsupported assumptions, and translate evidence into appropriate investigative and response decisions.
• Strong knowledge of network fundamentals, common internet protocols, operating systems, and security controls.
• Familiarity with the tools and techniques used in security-event analysis, incident response, digital forensics, malware analysis, and broader security operations.
• Ability to work in a project-based environment involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required.
• Willingness to travel internationally as needed.
• Previous experience in strategy or cybersecurity consulting is an advantage.
• An academic degree in a technological or scientific discipline is an advantage.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Team Leader (IR TL) to lead incident response investigations and security assessment projects for clients worldwide. This is a leadership role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines hands-on technical leadership, team management, client engagement and project leadership. The IR TL will lead and mentor highly skilled cyber security researchers and forensic experts while managing complex investigations and helping clients respond to sophisticated cyber threats.

Following a substantial and successful tenure in the position, the IR TL will have opportunities for continued professional growth and advancement across a variety of technical, managerial and client-facing roles within Sygnia.

Main Responsibilities

• Lead a team of top-tier cyber security researchers and forensic experts conducting assessments and in-depth analysis in complex investigations, as well as security assessments.
• Guide and empower team members, enhancing their technical and research skills.
• Lead client-facing projects including incident response and hunting efforts for large-scale sophisticated attacks, to contain and defeat real-world cyber threats.
• Collaborate and work with clients’ IT and Security teams during investigations.
• Design and improve internal incident response technologies, methodologies, and processes.

Main Requirements

• At least 3 years of senior-level experience leading or conducting incident response investigations and research in a professional cybersecurity environment, within the civilian sector.
• Experience conducting incident response investigations and research in a professional cybersecurity environment, including direct client-facing experience, preferably within the civilian sector.
• Excellent English – spoken and written.
• In-depth understanding of the lifecycle of advanced security threats, attack vectors and methods of exploitation.
• Strong technical understanding of network fundamentals, common internet protocols and system and security controls.
• Experience with the tools and techniques used in security event analysis, incident response, computer forensics, malware analysis, or other areas of security operations.
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis, preferably network traffic or log analysis, using relevant data analysis and data science platforms such as Jupyter, Splunk, pandas and SQL.
• Familiarity with cloud infrastructure, web applications and servers, and Android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms, such as Splunk, QRadar and ArcSight.
• Exceptional reporting and analytics abilities, as well as strong written and oral presentation skills. The ability to articulate complex technical issues in a concise and confident manner and provide status updates to a variety of audiences, including technical personnel and executive-level management.
• Ability to work in a dynamic matrix organizational structure, with people across all levels of the company, including executives and technical stakeholders.
• Team-oriented, with excellent communication skills.
• Decisive, bright and positive leader who strives for excellence.
• Previous experience in strategy or cybersecurity consulting – an advantage.
• Willingness to travel abroad as required.
• Willingness to work irregular hours, including evenings, nights, weekends and holidays, as required by incident response engagements.

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Cyber threats are constantly growing in volume, velocity and sophistication. When an organization is confronted with an advanced attack, it needs the strongest capabilities on its side. In many cases, an incident response engagement is in fact a battle within a network. The operational art, experience focus and speed of Sygnia response teams can mean the difference between a minor blow and a devastating impact on performance and reputation of organizations.

Sygnia is looking for highly capable Senior Incident Response Expert. The role includes conducting in-depth forensic analysis, investigation and response to real-world cyber threats. A significant part of our investigations is performed onsite at the client location, in collaboration with the client’s IT and security teams.

Main Responsibilities

• Take ownership in core IR effort or an entire workstream, and conduct complex IR tasks
• Technically lead small-scale investigations and small-scale proactive engagements
• Lead client communication on dedicated sessions and present reports
• Participate in ad-hoc scoping calls
• Lead publication efforts
• Participate and lead hiring interviews for IR experts, review home assignments
• Participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics and malware analysis.
• Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations.
• Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
• Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack.
• Collaborate with IT and Security teams during investigations.
• Generate and present a comprehensive and professional report of findings from investigations.

Main Requirements

• At least 5 years of a relevant experience .
• Bright, curious and determined team player, who strive for excellency.
• Problem solver, in-depth thinker with growth mindset.
• Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
• Deep technical understanding of network fundamentals and common Internet protocols.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
• Fluency with one or more scripting language (i.e. Python).
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
• Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight).
• Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.
• Willing to travel abroad (~30% of the time).

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Our Technology division builds a world class product, considered by experts as the leading XDR platform for cyber analytics and investigations. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels.

We are looking for a talented, passionate, and experienced Senior GenAI Engineer to join our team. You will design and build production-grade GenAI applications from the ground up, using technologies such as Google ADK, Docker, and AWS (Bedrock, AgentCore etc). We’re looking for someone with a genuine passion for GenAI, strong software engineering skills, hands-on experience developing GenAI solutions, and a collaborative, hands-on approach. You will also work closely with the team’s researchers, helping transform research code and prototypes into reliable, secure, and scalable containerized applications that can be deployed and operated in the cloud.

Main Responsibilities:

• Design and development of production-grade GenAI applications and agentic systems
• Build and operate reliable, secure, and scalable AI-powered services, with a focus on performance, observability, and cost
• Drive engineering best practices, including testing, evaluation, CI/CD, code review, and technical design, while contributing to product and technical innovation
• Work closely with the team’s researchers to transform research code and prototypes into reliable, containerized applications that can be deployed and operated in the cloud

Main Requirements:

• 5+ years of software engineering experience building production systems
• 3+ years of professional Python development experience
• Hands-on experience designing and developing production GenAI applications
• Strong understanding of LLMs, agentic systems, RAG, tool calling, prompt engineering, and evaluation
• Experience using GenAI observability tools for tracing, monitoring, evaluating, optimizing and debugging AI applications
• Strong experience with Docker and cloud environments (preferably AWS).
• Strong coding standards and experience with testing, CI/CD, observability, and production troubleshooting
• Strong communication skills and the ability to clearly articulate technical ideas and trade-offs
• High proficiency in English, both written and spoken
• A collaborative, responsible team player with a genuine passion for GenAI and continuous learning

Advantage:

• Hands-on experience with Google ADK
• Experience defining AWS infrastructure using AWS CDK
• Experience with AWS GenAI services such as Amazon Bedrock and Amazon Bedrock AgentCore
• Experience developing AI solutions for cybersecurity or security products

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Our Technology division builds a world class product, considered by experts as the leading XDR platform for cyber analytics and investigations. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels.

Sygnia is looking for a Senior DevOps Engineer with deep AWS expertise and strong hands-on experience with Kubernetes, GitOps, and Infrastructure as Code.

In this role, you will design, automate, and scale secure, highly available infrastructure and CI/CD pipelines supporting Sygnia’s flagship product. Beyond hands-on engineering, you will play a key role in shaping platform architecture, driving DevOps best practices, mentoring engineers, and continuously improving the reliability, scalability, and efficiency of our production environments.

Responsibilities

• Architect and manage secure, scalable, and highly available AWS environments, including multi-account and multi-region architectures.
• Design and implement GitOps-driven CI/CD processes using ArgoCD, Argo Workflows, GitHub Actions, and related tooling.
• Lead Infrastructure as Code (IaC) practices using Terraform and additional technologies such as Pulumi and Crossplane.
• Build, operate, and maintain production-grade Kubernetes (EKS) environments, including Helm-based deployments and cluster lifecycle management.
• Automate infrastructure provisioning, application deployment, and operational workflows across development, staging, and production environments.
• Drive DevSecOps practices, including security scanning, secrets management, and compliance automation.
• Establish and continuously improve monitoring, logging, and observability using tools such as Datadog, Prometheus, Grafana, and OpenTelemetry.
• Partner closely with development teams to enable seamless application integration and rapid, reliable software delivery.
• Optimize infrastructure for scalability, resilience, performance, and cost efficiency.
• Mentor engineers, promote DevOps best practices across teams, and contribute to platform and architecture decisions.
• Participate in and continuously improve the on-call rotation supporting mission-critical production systems.

Main Requirements

• 5+ years of experience as a DevOps Engineer in complex production environments.
• 3+ years of hands-on cloud experience, preferably with AWS, with strong knowledge of services such as EKS, EC2, S3, RDS, ElastiCache, SQS, VPC, and Route 53.
• Proven experience designing secure, scalable, and highly available cloud architectures, including multi-account environments.
• 3+ years of hands-on Kubernetes experience, including Helm, operators, and production-grade cluster management.
• Strong experience with CI/CD and GitOps practices using ArgoCD and/or GitHub Actions. Experience with Argo Workflows is a strong advantage.
• 3+ years of hands-on experience with Terraform.
• Strong scripting and automation skills using Python and/or Bash.
• Experience executing infrastructure and DevOps projects end-to-end in enterprise-scale environments.
• Extensive experience using AI-powered development and engineering tools such as Claude Code, Codex, Cursor, or similar tools to improve productivity, automation, troubleshooting, and software delivery.
• Excellent problem-solving, communication, and collaboration skills.
• Strong ownership, hands-on approach, and ability to operate independently.
• Passion for continuous learning, innovation, knowledge sharing, and mentoring others.

Advantages

• Experience with Pulumi and/or Crossplane.
• Experience with Argo Workflows.
• Experience with monitoring and observability platforms such as Datadog, Prometheus, Grafana, and OpenTelemetry.
• Experience implementing DevSecOps practices, including security scanning, secrets management, and compliance automation.
• Experience designing and operating multi-region AWS environments.

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior management, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Our Technology group builds Velocity - a world class product for threat detection, investigation and response (TDIR). This system plays a critical role in cyber threat investigations, integrating high-volume data ingestion, complex analytics, and large-scale querying. Our product is deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels.

We are seeking a talented Senior DevSecOps Engineer / Security Architect to act as the primary security owner and focal point for the Velocity R&D organization. The ideal candidate will possess a background in IT and security platforms, strong coding skills, the ability to independently learn new technologies, an unwavering commitment to quality, a collaborative work ethic, and a profound passion for securing complex infrastructures. 

Main Responsibilities:

·        Security Strategy & Architecture

• Own and continuously improve Velocity’s overall security posture, including risk assessment, prioritization, and long-term planning.
• Design and guide secure architectures for new and existing systems and features, aligned with best practices and compliance requirements.
• Lead threat modeling efforts and drive proactive validation against emerging attack techniques.
• Evaluate, introduce, and develop security solutions tailored to Velocity’s environment.
• Design and implement security controls for emerging technologies, including agentic AI systems, addressing risks such as misuse, data leakage, and adversarial manipulation.

·        Security Engineering & DevSecOps

• Embed security across the development lifecycle, including CI/CD pipelines, infrastructure, and application layers.
• Enhance logging, auditing, and detection capabilities, and design detection strategies tailored to the platform.
• Own and optimize security tooling, ensuring strong integration, visibility, and coverage across systems.

·        Incident Response & Operations

• Investigate and respond to security incidents and alerts, leveraging deep system understanding.
• Perform root cause analysis and drive improvements to prevent recurrence.

·        Collaboration & Enablement

• Partner closely with R&D, IT, Product, and the CISO to ensure secure design and day-to-day operations.
• Support compliance initiatives (e.g., SOC 2) and security reviews with internal and external stakeholders.
• Assist in customer-facing security processes, including questionnaires and evaluations.
• Promote security awareness and provide guidance across the organization.

Main Requirements:

• 5+ years of experience in DevSecOps, Security Engineering, or related roles within complex production environments.
• Experience working in a cybersecurity company or security-focused organization.
• Strong hands-on experience with cloud platforms, with a focus on AWS.
• Solid experience working with Kubernetes, Docker, and Linux-based systems.
• Proven experience integrating security into SaaS development lifecycles (SDLC) and working with monitoring and observability tools.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, Pulumi, or similar.
• Proficiency in scripting and automation using languages such as Python and/or Bash.
• Familiarity with security and IT platforms, including logging, monitoring, and detection systems.
• Strong understanding of security principles, threat modeling, and frameworks (e.g., NIST-CSF, CIS, SOC2, MITRE ATT&CK).
• Ability to operate independently, take ownership, and drive initiatives end-to-end.
• Excellent communication skills, including the ability to operate effectively during high-pressure incidents in a global environment.

Advantages:

• Hands-on experience with databases and data platforms such as PostgreSQL, Snowflake, Elasticsearch, or Redis.
• Background in DevOps / Platform Engineering roles.
• Experience in consulting or customer-facing environments.

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Our Technology group builds Velocity - a world class product for threat detection, investigation and response (TDIR). This system plays a critical role in cyber threat investigations, integrating complex data operations, extensive Python-based analytics, and large-scale database querying using Snowflake. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels.

We are seeking a talented Full Stack Developer with strong expertise in Python and SQL to join our dynamic team. The ideal candidate will have substantial backend and data engineering experience, with the capability and willingness to support and develop features across the entire stack.

Responsibilities:

• Develop, enhance, and maintain backend systems, particularly focusing on Python-based services and advanced SQL queries.
• Handle extensive data engineering tasks, including translating Python analytics into optimized Snowflake SQL queries.
• Support end-to-end feature delivery, contributing both backend and frontend development as required.
• Ensure high-quality coding practices, efficient troubleshooting, and proactive improvement of platform components.
• Actively participate in the team’s agile practices, contributing to architecture decisions and overall technical direction.

Main Requirements:

• 6+ years of full-stack development experience, with a strong emphasis on Python backend and SQL.
• 4+ years of expertise in Python, particularly in developing scalable and high-performance systems.
• Extensive experience in writing, optimizing, and maintaining complex SQL queries and working with large-scale databases (preferably Snowflake).
• Hands-on experience with modern JavaScript frameworks (ReactJS preferred).
• Strong understanding of data engineering practices, database schema design, and data-driven analytics.
• Familiarity with DevOps practices, CI/CD pipelines, and cloud infrastructure (AWS preferred).
• Excellent communication skills and a collaborative approach to problem-solving.

Advantages:

• Experience with Kubernetes and Helm.
• Background in cybersecurity or data-intensive industries.
• Proactive, results-driven mindset with the ability to quickly learn and implement new technologies.

About Sygnia

Sygnia is a global cyber readiness and response team that helps organizations beat attackers and stay secure. We combine creative thinking, deep technical expertise, and battle-tested experience to strengthen cyber resilience and guide organizations through high-pressure situations. Our specialists come from elite military technology units and leading roles across the cybersecurity industry. We support clients at every stage of their security journey and bring the mindset, tools, and experience needed to help them stay ahead of evolving threats.

The Role

Sygnia is looking for a Client Partner, Manager in the United States to win new enterprise clients across North America as part of our Sales team. This is a sales-focused, client-facing individual contributor role responsible for converting qualified opportunities into signed business, building new client relationships, and generating revenue.

You will receive qualified opportunities generated primarily through Sygnia's business development, marketing, and partner channels, and lead them from qualification through close. You will own a defined revenue target and be accountable for converting qualified opportunities into signed business and consistently delivering against your target.

This role is focused primarily on acquiring new clients, with selective responsibility for expansion after the initial sale. During the first six months of each new client relationship, you will lead commercial expansion, identify follow-on opportunities, and support an orderly transition to the long-term account owner.

What You’ll Do

• Convert qualified opportunities into signed new-logo business, with responsibility for achieving a defined revenue target.
• Own the sales process from qualification through discovery, scoping, proposal development, negotiation, and close.
• Manage a portfolio of qualified opportunities with the discipline needed to improve win rate and increase the number of closed-won opportunities.
• Build relationships with technical, security, business, and executive stakeholders, establishing credibility and creating a strong foundation for a long-term client relationship.
• Work closely with Sygnia's technical and engagement teams to understand client challenges, shape relevant solutions, and bring the right expertise into each opportunity.
• Develop and maintain clear opportunity plans, including stakeholder maps, decision criteria, competitive considerations, next steps, and realistic forecasts.
• Lead client meetings, workshops, and presentations that advance opportunities and demonstrate the relevance of Sygnia's cybersecurity capabilities.
• Coordinate the commercial transition from sales into delivery, ensuring that client expectations, commitments, and relationship context are communicated clearly to the engagement team.
• Own commercial expansion during the first six months of each new client relationship, identifying follow-on needs and developing additional opportunities before transitioning the account.
• Collaborate across Sygnia's matrix organization and with business development, marketing, and partner teams to maintain momentum and progress opportunities toward close.
• Contribute market, buyer, and competitive insights that strengthen Sygnia's sales approach, messaging, and go-to-market priorities.

What We’re Looking For

• Proven track record of converting qualified opportunities into new-logo revenue, ideally within cybersecurity consulting, professional services, or a related technology environment.
• Seven to ten years of professional experience, including significant experience in client-facing sales, business development, consulting, or cybersecurity services.
• Strong sales mindset with a demonstrated ability to advance qualified opportunities, navigate complex buying environments, negotiate effectively, and close business.
• Strong client service orientation, with the ability to build credibility and trust quickly with technical, business, and executive stakeholders.
• Ability to understand complex cybersecurity challenges and translate them into relevant business outcomes and service opportunities.
• Disciplined opportunity management skills, including the ability to manage multiple pursuits, maintain momentum, and provide realistic forecasts.
• Proactive, independent, and hands-on working style with the ability to operate effectively in fast-moving and high-pressure environments.
• Excellent written and verbal communication skills, with strong presentation and negotiation capabilities.
• Experience working in a matrixed organization and collaborating across multiple teams and geographies.
• Positive, adaptable mindset with the ability to learn quickly and navigate changing client and market needs.
• Ability to travel within the United States approximately 20 percent of the time, primarily for client meetings, relationship development, and industry events.

Bonus Points For

• Experience selling cybersecurity consulting, incident response, managed security, or other complex cybersecurity services.
• Experience winning large enterprise clients and navigating complex, multi-stakeholder buying processes.
• Existing relationships with CISOs, CIOs, CTOs, and other senior security and technology leaders.
• Experience selling into Fortune 1000 or other large enterprise organizations.
• Familiarity with incident response, cyber resilience, security assessments, or other professional cybersecurity services.
• Relevant cybersecurity certifications such as CISSP, CISM, C-CISO, or GSTRT.

Why Sygnia

Sygnia offers the opportunity to work alongside some of the most experienced cybersecurity professionals in the industry and engage directly with organizations facing complex security challenges. In this role, you will have a direct impact on Sygnia's growth in North America by winning new clients and building the foundation for trusted, long-term relationships with senior security leaders.

You will work across a highly experienced team of cybersecurity consultants, incident responders, business development professionals, and security specialists, giving you the opportunity to deepen your cybersecurity expertise while building a strong network of senior client relationships.

Sygnia is a global cyber readiness and response team that helps organizations beat attackers and stay secure. We combine creative thinking, deep technical expertise and battle-tested experience to strengthen resilience and guide organizations through high pressure situations. Our specialists come from elite military technology units and leading roles across the cyber industry. We support clients at every stage of their security journey and bring the mindset, tools and experience needed to help them stay ahead of evolving threats.

The Role

We are looking for an Account Executive for EMEA who will focus on the IL and MENA regions and independently lead a portfolio of clients as part of our Sales team. The person in this role will act as a trusted advisor, drive new business opportunities and help clients strengthen their security posture with confidence and clarity. This role will own a specific revenue target for the region and will be accountable for opportunity growth and client retention.

What You Will Do

• Drive business opportunities in your region by attending events and client workshops, developing proposals and sales collateral and leading business development discussions.
• Work with existing clients to identify additional needs and scope future engagements.
• Maintain strong relationships with technical teams and senior leadership to anticipate requirements and set expectations around Sygnia services.
• Build and maintain long term partnerships with leading multinational organizations and serve as their trusted advisor.
• Partner closely with Sygnia engagement teams to develop and review deliverables. Present status updates to diverse audiences that include technical teams, CISOs, CIOs, CTOs and executive leadership.
• Participate in internal capability building, methodology development and broader strategic planning.

Why Sygnia

Sygnia offers the opportunity to work with some of the most skilled cyber professionals in the world. You will partner with organizations facing complex challenges and play a central role in guiding them through fast moving and high impact situations. You will also have room to grow, learn from top experts and contribute to the development of new capabilities that push the industry forward.

Main Requirements:

• Proven track record in generating and managing business opportunities in IL & Europe, with specific experience or exposure to the MENA region (as an advantage).
• At least seven years of professional experience, including a minimum of four years in strategic consulting or a cyber security leadership role.
• Strong client service orientation with exceptional interpersonal skills and the ability to earn trust with clients and partners.
• Proactive, independent and hands on work style with the ability to deliver in environments that involve pressure, uncertainty and complexity.
• Outstanding written and verbal communication skills and strong presentation abilities.
• Strong analytical capabilities with both strategic and detailed thinking.
• Experience working in a dynamic matrix environment and collaborating across all levels of an organization.
• A positive and flexible mindset with the ability to learn quickly and adapt to change.
• Academic degree in a relevant discipline.
• Relevant security certifications such as CISSP, CISM, C-CISO or GSTRT are an advantage.
• Ability to travel abroad, approximately 25 percent of the time, primarily for client relationship development.
• Fluent in Hebrew & English.

Bonus Points For

• Experience working with multinational organizations headquartered in the MENA region.
• Knowledge of regional regulatory expectations and security requirements.
• Professional proficiency in Arabic is a strong advantage.
• Familiarity with crisis response environments or high pressure advisory work.

About Sygnia

Sygnia is a global cyber readiness and response team that helps organizations beat attackers and stay secure. We combine creative thinking, deep technical expertise, and battle-tested experience to strengthen cyber resilience and guide organizations through high-pressure situations. Our specialists come from elite military technology units and leading roles across the cybersecurity industry. We support clients at every stage of their security journey and bring the mindset, tools, and experience needed to help them stay ahead of evolving threats.

The Role

Sygnia is looking for a Manager, Account Executive in the United States to own and grow a portfolio of named accounts across North America as part of our Sales team. This is a sales-focused, client-facing role responsible for developing new revenue within existing accounts, identifying opportunities, and building long-term relationships with key client stakeholders.

You will serve as a trusted cybersecurity advisor to your clients, developing a deep understanding of their business, security priorities, and evolving needs, and connecting those needs to Sygnia’s services. You will own a specific revenue target and be accountable for account growth, opportunity development, and long-term client relationships.

This role is focused primarily on expanding existing accounts rather than managing a broad territory. You will work closely with Sygnia’s technical and engagement teams to identify client needs, shape opportunities, and bring the right expertise to the client at the right time.

What You’ll Do

• Own and grow a portfolio of named accounts across North America, with responsibility for achieving a defined revenue target and driving year-over-year account growth.
• Build and maintain long-term relationships with key technical, security, and executive stakeholders, serving as a trusted cybersecurity advisor and primary commercial point of contact.
• Develop new revenue opportunities within existing accounts by understanding client priorities, identifying unmet needs, and connecting those needs to Sygnia’s cybersecurity services.
• Lead the account development process from initial opportunity identification through qualification, scoping, proposal development, negotiation, and close.
• Work closely with Sygnia’s technical and engagement teams to understand client challenges, develop solutions, and shape opportunities that deliver meaningful value.
• Maintain a strong understanding of each account’s business, cybersecurity environment, priorities, and relationship landscape to proactively identify opportunities and potential risks.
• Participate in client meetings, workshops, and industry events to deepen relationships, strengthen Sygnia’s position within accounts, and generate new opportunities.
• Partner with Sygnia engagement teams to develop and review deliverables and present status updates, findings, and recommendations to audiences ranging from technical teams to CISOs, CIOs, CTOs, and executive leadership.
• Develop and execute account plans that outline relationship priorities, growth opportunities, key stakeholders, and strategies for expanding Sygnia’s presence within each account.
• Collaborate across Sygnia’s matrix organization to align client needs with the right services, capabilities, and internal expertise.
• Contribute to internal capability building, methodology development, and strategic discussions based on client and market insights.

What We’re Looking For

• Proven track record of growing existing client accounts and generating new revenue within those accounts, ideally in cybersecurity consulting, professional services, or a related technology environment.
• Seven to ten years of professional experience, including significant experience in client-facing sales, account management, consulting, or cybersecurity services.
• Strong sales mindset with a demonstrated ability to identify opportunities, develop relationships, navigate complex buying environments, and close business.
• Strong client service orientation, with the ability to build credibility and long-term trust with technical, business, and executive stakeholders.
• Ability to understand complex cybersecurity challenges and translate them into relevant business and service opportunities.
• Proactive, independent, and hands-on working style with the ability to operate effectively in fast-moving and high-pressure environments.
• Excellent written and verbal communication skills, with strong presentation and negotiation capabilities.
• Strong analytical and problem-solving skills, combining strategic thinking with attention to detail.
• Experience working in a matrixed organization and collaborating across multiple teams and geographies.
• Positive, adaptable mindset with the ability to learn quickly and navigate changing client and market needs.
• Ability to travel within the United States approximately 20 percent of the time, primarily for client relationship development, meetings, and industry events.

Bonus Points For

• Experience selling cybersecurity consulting, incident response, managed security, or other complex cybersecurity services.
• Experience managing large enterprise accounts and navigating complex, multi-stakeholder buying processes.
• Existing relationships with CISOs, CIOs, CTOs, and other senior security and technology leaders.
• Experience selling into Fortune 1000 or other large enterprise organizations.
• Familiarity with incident response, cyber resilience, security assessments, or other professional cybersecurity services.
• Relevant cybersecurity certifications such as CISSP, CISM, C-CISO, or GSTRT.

Why Sygnia

Sygnia offers the opportunity to work alongside some of the most experienced cybersecurity professionals in the industry and engage directly with organizations facing complex security challenges. In this role, you will have a direct impact on Sygnia’s growth in North America while building trusted relationships with senior security leaders and helping clients address some of their most important cybersecurity priorities.

You will work across a highly experienced team of cybersecurity consultants, incident responders, and security specialists, giving you the opportunity to deepen your cybersecurity expertise while building a strong network of senior client relationships.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force", Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia's managed MDR is a high-end, 24/7 fully-managed security operations service that includes monitoring, threat detection, forensic analysis, accelerated investigation, and rapid transition to incident response when an attack is detected. The service is powered by Velocity XDR, a unified security detection and response platform that was built by Sygnia responders and has been battle-tested defending clients against thousands of real-world attacks. This position is based in Singapore and will primarily support enterprise clients in the Philippines, collaborating closely with their local IT and security teams.

Sygnia is looking for a Cyber Security Engineer with a solid technical background in cyber security to lead the implementation of Sygnia’s Velocity XDR product and ensure that Sygnia meet its clients’ cyber security needs.

As a Cyber Security Engineer in a fast-expanding operation team, you will be responsible for onboarding new global clients to the MXDR services, developing and maintaining detection scenarios and alerts, analyzing the client's environment, and providing technical support and guidance to clients. To excel in this role, you will demonstrate strong technical aptitude, dedication to delivering high-quality work, and a cooperative approach to teamwork.  

Main Responsibilities:

• Lead the onboarding process for all new clients joining the MDR services, working closely with the clients’ IT and security teams to ensure smooth implementations.
• Develop detection scenarios and alerts for Sygnia's XDR solution (Velocity) to ensure effective threat detection and response.
• Oversee Velocity KPIs and measurements set by the client, adjusting, analyzing and maintaining them according to their needs and tracking the impact of the platform on the client's networks, endpoints, applications, and cloud environments.
• Continuously improve Velocity monitoring capabilities and keep up-to-date with the latest developments in the cyber threat landscape.
• Provide technical support and guidance to clients on Velocity security-related issues, including implementing security best practices and ensuring compliance with industry standards.

Main Requirements:

• At least 5 years of hands-on experience as a Cyber Security Engineer in the cyber security industry.
• Proven experience in MXDR / MDR / SOC / MSSP environments, including roles such as SOC/MSSP Integrator, Tier 3 Analyst, Detection Engineer, or MDR Cyber Security Engineer.
• Experience in implementing SIEM, EDR, and/or XDR platforms, including onboarding and operational use.
• Hands-on experience with log ingestion, data source onboarding, and integrations, including collecting, parsing, and maintaining visibility across endpoints, servers, network, and cloud environments.
• Very high proficiency in English (written and spoken).
• Ability to work effectively with stakeholders in the Philippines. Proficiency in Filipino (Tagalog) or another major Philippine language is a strong advantage, given the client base, but is not a strict requirement. Candidates without Philippine language skills are still encouraged to apply.Familiarity with log collection methodologies and systems, auditing policies, and maintaining visibility across networks, hosts, and cloud environments.
• Experience with providing technical guidance and support to global clients.
• Demonstrated experience working with Linux operating systems (proficiency in Linux command-line tools, including file manipulation, system administration, and troubleshooting).
• Experience working with relational databases, preferably SQL.
• Familiarity with cyber security industry standards and best practices.
• Excellent problem-solving skills and the ability to work independently.
• Advanced familiarity with the cybersecurity threat landscape and attack scenarios.
• Excellent communication skills, including strong ability to elaborate on a technical idea.
• Basic Python scripting experience for automation, enrichment, or tooling - significant advantage.
• Experience implementing or working with additional security technologies such as email security, WAF, NAC, firewalls, identity and access management (IAM), and cloud security controls – advantage.
• Proven experience with OT environments – advantage.  

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

The Detection Engineer is responsible for designing, validating, optimizing, and continuously improving Sygnia MDR detection content across multiple security domains. This role combines threat research, security analytics, data-driven decision making, and detection engineering to ensure high-fidelity threat detection while minimizing operational noise. 

The Detection Engineer serves as the bridge between MDR Operations, Product, Engineering, and Threat Research teams, transforming emerging threats, operational insights, and telemetry analysis into scalable and actionable detection capabilities. .  

Main Responsibilities:

• Detection Engineering & Optimization: Design, develop, maintain, and continuously optimize high-fidelity detection logic across endpoint, identity, cloud, email, network, and other security domains, maximizing coverage while minimizing false positives.
• Threat Research & Detection Coverage: Research emerging threats, vulnerabilities, and attacker TTPs, translating threat intelligence into actionable detections while identifying and closing gaps in MITRE ATT&CK and ATLAS coverage.
• Detection Quality & Performance: Establish detection quality standards, define and monitor performance metrics (precision, false positive rates, alert volume, coverage, and stability), and continuously improve detection effectiveness.
• Detection Testing & Validation: Develop testing methodologies, validation frameworks, and lab environments to evaluate detection logic through attack simulations, real-world scenarios, and repeatable testing procedures before production deployment.
• Security Data Research & Analytics: Analyze security telemetry, identify data quality and visibility gaps, and collaborate with Product and Engineering teams to improve data collection, normalization, enrichment, and detection capabilities.
• AI & Detection Innovation: Research, develop, and evaluate AI agents and AI-powered automation solutions for threat research, security investigations, detection engineering, and alert enrichment, ensuring measurable improvements in detection quality and operational efficiency.
• Detection Troubleshooting & Continuous Improvement: Investigate noisy or ineffective detections, perform root cause analysis, refine detection logic, and leverage operational feedback to improve alert quality and reduce analyst workload.
• Client-Specific Detection Development: Design and implement customized detection content based on client environments, security requirements, threat profiles, and available telemetry.
• Operational Excellence & Strategic Development: Drive initiatives to reduce alert fatigue, accelerate detection tuning, improve analyst efficiency, expand security visibility, and contribute to the long-term detection engineering strategy.

Main Requirements:

• 3+ years of experience in Detection Engineering, Threat Hunting, Security Analytics, MDR, Security Research, or related cybersecurity roles. 
• Experience delivering security detections for products, including hands-on experience creating, implementing, and tuning detection rules in SIEM, XDR, or EDR platforms. 
• Experience working with large-scale security datasets and telemetry. 
• Experience with SQL, KQL, Python, or similar analytical tools. 
• Understanding of security monitoring, detection methodologies, and investigation workflows. 
•  Strong understanding of attacker TTPs and the MITRE ATT&CK and ATLAS framework. 
• Experience developing AI agents or AI-powered automation solutions. 
• Strong analytical mindset with the ability to explore, understand, and derive insights from large-scale security datasets.  
• Experience working with security telemetry across multiple domains, including endpoint, identity, cloud, email, network security, OS internals, EDR, Active Directory, Office 365, Cloud technologies such as AWS, Microsoft Azure and GCP, Network protocols and security products, including experience with security of AI infrastructure and services.  
• Ability to assess data quality, identify telemetry gaps, and evaluate the feasibility and effectiveness of detection strategies. 
• Experience evaluating or onboarding new security data sources and telemetry. 
• Excellent written and verbal communication skills. 
• Passion for cybersecurity and continuous learning. 
• Lab building and attack simulation experience. 
• Threat Hunting experience, including hands-on IR experience – advantage.  
• Red Team or penetration testing background – advantage  
• Experience with Detection-as-Code methodologies, including Git-based workflows, version control, automated detection testing, and CI/CD pipelines – An advantage. 

About Sygnia

Sygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset.

Our services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as finance, healthcare, technology, and critical infrastructure.

With a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most.

The Role

Sygnia is looking for a Cyber Security Engineer with a strong technical background in cybersecurity to lead the implementation of Sygnia’s Velocity XDR platform and ensure our clients’ security monitoring and detection needs are met.

As a Cyber Security Engineer supporting Sygnia’s growing MDR operation in the United States, you will play a key role in in onboarding new clients, integrating their security environments with Velocity, developing and maintaining detection scenarios, analyzing client environments, and providing technical guidance throughout the customer lifecycle.

The ideal candidate combines strong hands-on technical skills with the ability to work directly with clients and internal teams. You should be comfortable working across complex enterprise environments, troubleshooting integrations, and translating technical requirements into effective security monitoring and detection capabilities.

What You’ll Do

• Lead the onboarding process for new clients joining Sygnia’s MDR services, working closely with client IT and security teams to ensure successful implementation and transition into ongoing monitoring.
• Develop, configure, and maintain detection scenarios, alerts, and monitoring capabilities within Sygnia's Velocity XDR platform to support effective threat detection and response.
• Analyze client environments and security requirements to determine the appropriate data sources, integrations, and monitoring capabilities needed to provide effective visibility.
• Oversee and analyze Velocity KPIs and client-defined measurements, making adjustments based on evolving security requirements and tracking the impact of the platform across client networks, endpoints, applications, and cloud environments.
• Troubleshoot technical onboarding and integration issues, working with clients and internal teams to resolve challenges and maintain reliable security visibility.
• Continuously improve Velocity monitoring capabilities and stay current with emerging threats, attack techniques, and developments in the cyber threat landscape.
• Provide technical support and guidance to clients on Velocity and security monitoring-related issues, including recommendations for security best practices and improvements.
• Collaborate with MDR analyst, incident responders, product and platform teams, and other technical stakeholders to improve detection capabilities and the overall client experience.
• Identify opportunities to improve monitoring, visibility, automation, and operational efficiency across client environments.

What We’re Looking For

• At least 5 years of hands-on experience as a Cyber Security Engineer or in a similar technical cybersecurity role.
• Proven experience in MXDR, MDR, SOC, MSSP, or similar security operations environments, including roles such as SOC/MSSP Integrator, Tier 3 Analyst, Detection Engineer, or MDR Cyber Security Engineer.
• Experience implementing and operating SIEM, EDR, and/or XDR platforms, including client onboarding and ongoing operational support.
• Hands-on experience with log ingestion, data source onboarding, integrations, and maintaining visibility across endpoints, servers, networks, and cloud environments.
• Familiarity with log collection methodologies, parsing, auditing policies, and maintaining security visibility across complex enterprise environments.
• Experience providing technical guidance and support directly to enterprise clients.
• Strong experience working with Linux operating systems, including command-line tools, file manipulation, system administration, and troubleshooting.
• Experience working with relational databases, preferably SQL.
• Familiarity with cybersecurity industry standards, security controls, and best practices.
• Ability to communicate effectively in Spanish at a conversational or professional working level, particularly when supporting Spanish-speaking clients or stakeholders.
• Excellent problem-solving skills and the ability to work independently.
• Strong understanding of the cybersecurity threat landscape, attack techniques, and common attack scenarios.
• Excellent communication skills, with the ability to explain complex technical concepts clearly to both technical and non-technical stakeholders.
• Basic Python scripting experience for automation, enrichment, or tooling.

Bonus Points For

• Experience implementing or working with additional security technologies such as email security, WAF, NAC, firewalls, identity and access management (IAM), and cloud security controls.
• Experience with security automation, detection engineering, or development of security tooling.
• Advanced experience with cloud security across AWS, Azure, or Google Cloud Platform.
• Experience working with OT or industrial control environments.
• Experience supporting global enterprise clients across multiple industries and technical environments.
• Relevant cybersecurity certifications or equivalent hands-on technical experience.

Why Sygnia

• Work directly with Sygnia’s proprietary Velocity XDR platform, built by cybersecurity professionals with real-world incident response experience.
• Gain exposure to complex enterprise environments and real-world attacks across a diverse global client base.
• Work alongside experienced MDR analysts, incident responders, threat hunters, and cybersecurity experts.
• Play a hands-on role in building and improving security monitoring and detection capabilities as Sygnia’s U.S. MDR operation continues to grow.
• Work on technically challenging problems that go beyond traditional SOC monitoring.
• Develop your expertise across detection engineering, security integrations, threat detection, incident response, and enterprise security environments.
• Join a team that values technical excellence, curiosity, collaboration, and continuous learning.

Sygnia is a top tier cyber technology and services company, providing consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cybersecurity service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for a SOC Analyst to join the team of cybersecurity analysts monitoring services, tier 2. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status. The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a “can-do” attitude.

Main Responsibilities

• Work across all areas of Sygnia’s SOC to include continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning and forensics.
• Solving security incidents under defined service level agreements and objectives.
• Prioritize and differentiate between potential incidents and false alarms.
• Addressing clients’ inquiries via phone, e-mail, and live chat.
• Work side by side with customers providing insightful incident reports.
• Work very closely with your peer & higher Tier analysts to make sure your analysis meets the quality standards.
• Identify opportunities for improvement and automation within the MXDR Operation Lead and lead efforts to operationalize your ideas
• Identify and offer solutions to gaps in current capabilities, visibility, and security postureCorrelate information from disparate sources to develop novel detection methods

Requirements

• 1 year of experience in a SOC/MDR or Managed EDR service, night and weekend shifts as well
• Strong analytical thinking, problem-solving mindset and independency.
• Independent, bright and positive analyst, who strive for excellency, and able to succeed in a dynamic environment.
• Basic understanding of the life cycle of advanced security threats, attack vectors and methods of exploitation.
• Hands-on experience working with SIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.)
• Good familiarity of common data and log sources for monitoring, detection and analysis (e.g., Event Logs, Firewall, EDR).
• Strong technical understanding of network fundamentals, common Internet protocols and system and security controls.
• Familiarity of system and security controls, including basic knowledge of host-based forensics and OS artifacts.
• Proficient knowledge and experience with scripting (e.g., Python).
• Familiarity with cloud infrastructure, web application and servers – an advantage.
• Fluent English (written, spoken) – a must. Spanish – an advantage.

About Sygnia

Sygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset.

Our services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as finance, healthcare, technology, and critical infrastructure.

With a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most.

The Role

Sygnia is looking for a Security Operations Center (SOC) Analyst to join our growing U.S. Managed Detection and Response team in Austin, Texas.

This is an exciting opportunity to help build Sygnia's first U.S. MDR site as we expand our global follow-the-sun operating model. You will work alongside experienced cybersecurity professionals to investigate security events, perform threat hunting, improve detection capabilities, and help protect some of the world's leading organizations.

As a SOC Analyst, you will leverage Sygnia's proprietary Velocity platform to monitor client environments, investigate alerts, and identify emerging threats. This is a hands-on technical role that combines security monitoring, incident investigation, detection engineering, and customer interaction.

This position is onsite in Austin five days per week and follows a rotating Sunday through Friday schedule to support global MDR operations.

What You'll Do

• Monitor client environments using Sygnia's proprietary Velocity platform to identify, investigate, and respond to security events.
• Perform in-depth alert triage, incident investigation, and threat analysis while meeting defined service level objectives.
• Conduct proactive threat hunting to identify malicious activity that may evade traditional detections.
• Differentiate legitimate security incidents from false positives and determine appropriate response actions.
• Develop and improve detection logic, correlation rules, and use cases to strengthen monitoring capabilities.
• Correlate data from multiple security technologies and log sources to identify complex attack activity.
• Work closely with clients by providing timely updates, incident reports, and actionable security recommendations.
• Collaborate with senior analysts and MDR leadership to maintain high investigation quality and continuously improve operational processes.
• Identify opportunities to automate workflows and improve the efficiency of MDR operations.
• Recommend improvements to client visibility, security monitoring, and overall security posture.

What We're Looking For

• At least three years of experience in a SOC, MDR, Managed EDR, or security operations environment.
• Hands-on experience investigating security alerts and responding to security incidents.
• Strong analytical and problem-solving skills with the ability to work independently in a fast-paced environment.
• Understanding of modern cyber threats, attack techniques, and common attacker methodologies.
• Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Exabeam, or similar technologies.
• Familiarity with common enterprise security technologies including EDR, firewalls, Windows Event Logs, identity platforms, and network security controls.
• Strong understanding of networking fundamentals, operating systems, and enterprise security architecture.
• Basic knowledge of host-based forensics, operating system artifacts, and security event analysis.
• Experience with scripting or automation using Python or similar languages.
• Ability to communicate effectively with both technical teammates and customers.
• Willingness to work an onsite rotating schedule in Austin, including Sunday through Friday coverage as part of Sygnia's follow-the-sun MDR model.

Bonus Points For

• Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with detection engineering or SIEM content development.
• Familiarity with digital forensics, malware analysis, or incident response.
• Experience working within an MSSP or MDR provider.

Why Sygnia

• Help build Sygnia's first U.S. MDR site and play a foundational role in its long-term success.
• Investigate sophisticated cyber threats affecting some of the world's leading organizations.
• Work alongside experienced incident responders, threat hunters, and cybersecurity experts.
• Gain exposure to a wide variety of enterprise environments, industries, and attack scenarios.
• Contribute to the evolution of Sygnia's proprietary Velocity platform and MDR capabilities.
• Join a collaborative team that values technical excellence, continuous learning, and innovation.
• Grow your career with opportunities to expand into advanced monitoring, incident response, threat hunting, and leadership roles.

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status. The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a ‘can-do’ attitude.

Responsibilities

• Working across all areas of Sygnia’s SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics.
• Solving security incidents in accordance with defined service level agreements and objectives.
• Prioritizing and differentiating between potential incidents and false alarms.
• Addressing clients’ enquiries via phone, email, and live chat.
• Working side-by-side with customers, providing insightful incident reports.
• Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards.
• Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas.
• Identifying and offering solutions to gaps in current capabilities, visibility, and security posture.
• Correlating information from disparate sources to develop novel detection methods.

Requirements

• At least one year of experience in a SOC/MDR or Managed EDR service, including night and weekend shifts.
• Strong analytical thinker, problem-solving mindset, and ability to succeed in a dynamic environment.
• Independent, bright and positive analyst who strives for excellence.
• Proficiency and experience with scripting (Python).
• Strong capabilities in drafting cyber security reports for clients.
• Basic understanding of the lifecycle of advanced security threats, attack vectors, and methods of exploitation.
• Hands-on experience working with SIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.)
• Familiarity with common data and log sources for monitoring, detection and analysis (e.g., Event Logs, firewall, EDR).
• Strong technical understanding of network fundamentals, common internet protocols, and system and security controls.
•  Basic knowledge of host-based forensics and OS artifacts.
• Familiarity with cloud infrastructure, web application and servers – an advantage.
• Fluent English (written, spoken) – a must. Another language – an advantage.

Sygnia is a top tier cyber technology and services company, providing consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cybersecurity service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced MDR Site Team Lead to join our MDR Operations team in Singapore. This is a hands-on technical leadership role combining people management with advanced security operations. The Team Lead will manage and develop a team of MDR Analysts while serving as the senior technical authority on shift and the first point of escalation for complex investigations and high-severity security events. Working closely with the MDR Site Manager and Sygnia’s global MDR teams, the Team Lead will be responsible for maintaining high technical standards, meeting client SLAs, ensuring effective Follow-the-Sun operations, and continuously improving our detection and response capabilities.

Main Responsibilities

• Lead, manage, and professionally develop a team of MDR Analysts, providing ongoing technical coaching, mentoring, and performance feedback.
• Manage team scheduling, shift coverage, and on-call allocation to support 24/7 Follow-the-Sun operations.
• Serve as the senior technical escalation point for complex investigations and high-severity security events.
• Manage alert queues and priorities, ensuring acknowledgement, investigation, and escalation are handled in accordance with client SLAs.
• Monitor operational performance, identify potential SLA risks or bottlenecks, and proactively rebalance workloads when required.
• Ensure effective cross-region shift handovers, including open investigations, client communications, and outstanding operational tasks.
• Lead and support in-depth security investigations, including log-based forensic analysis across endpoint, network, identity, email, cloud, and application environments.
• Continuously improve detection capabilities by tuning existing logic, reducing false positives, and translating threat intelligence and post-incident findings into new or enhanced detections.
• Review analysts’ investigations, escalations, reports, and client communications to ensure technical accuracy, completeness, consistency, and professionalism.
• Act as a technical point of contact for clients during security events, clearly communicating findings, risks, status updates, and recommended actions to both technical and non-technical stakeholders.
• Produce and review client-ready incident and investigation reports, including timelines, root cause, impact assessments, and remediation recommendations.
• Serve as the focal point between MDR and Incident Response teams when critical events require transition to full Incident Response.
• Develop and maintain MDR procedures, runbooks, knowledge articles, and client-specific documentation.
• Identify opportunities to improve MDR processes, methodologies, and operational efficiency.
• Support the MDR Site Manager with ongoing operational activities and act on their behalf when required.

Main Requirements

• 5+ years of hands-on experience in SOC, MDR, or MSSP environments, including security monitoring, investigation, detection, and incident response.
• 1+ years of experience leading or directly managing security analysts, including technical mentoring, performance management, and shift or resource planning.
• Strong hands-on investigation experience across SIEM, EDR/XDR, network, identity, email, cloud, and endpoint telemetry.
• Experience with forensic and incident response investigations, including host, network, and cloud log analysis.
• Strong understanding of security threats, attacker behavior, investigation methodologies, and incident response processes.
• Experience building, tuning, and improving detection scenarios and correlation logic.
• Hands-on experience investigating security events in at least one major cloud platform (AWS, Azure, or GCP).
• Experience analyzing network security telemetry, including firewalls, WAF, proxy, and DNS logs.
• Experience investigating EDR/XDR, Windows, Sysmon, identity, and email security telemetry.
• Familiarity with malware analysis and threat intelligence enrichment.
• Proven ability to produce high-quality incident and investigation reports for external clients.
• Experience working in a 24/7 or Follow-the-Sun operational environment.
• Strong leadership and coaching capabilities, with the ability to develop analysts while maintaining high technical and operational standards.
• Excellent written and verbal English, with the confidence to lead technical discussions with clients, including during high-pressure incidents.
• Strong judgment, prioritization, and decision-making skills, with the ability to manage multiple competing client priorities and SLAs.
• Proactive, accountable, and improvement-oriented mindset.
• Ability to support escalations and critical events outside regular working hours when required.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.

Advantages

• Previous experience working for an MSSP or MDR provider.
• Relevant cybersecurity certifications.
• Knowledge of Python for security automation and analysis.
• Experience with SQL for querying security, log, or case-management datasets.