Cyber Security Engineer

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force", Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia's managed MDR is a high-end, 24/7 fully-managed security operations service that includes monitoring, threat detection, forensic analysis, accelerated investigation, and rapid transition to incident response when an attack is detected. The service is powered by Velocity XDR, a unified security detection and response platform that was built by Sygnia responders and has been battle-tested defending clients against thousands of real-world attacks.

Sygnia is looking for a Cyber Security Engineer with a solid technical background in cyber security to lead the implementation of Sygnia’s Velocity XDR product and ensure that Sygnia meet its clients’ cyber security needs.

As a Cyber Security Engineer in a fast-expanding operation team, you will be responsible for onboarding new global clients to the MXDR services, developing and maintaining detection scenarios and alerts, analysing the client's environment, and providing technical support and guidance to clients. To excel in this role, you will demonstrate strong technical aptitude, dedication to delivering high-quality work, and a cooperative approach to teamwork.  

Main Responsibilities:

• Lead the onboarding process for all new clients joining the MXDR services, working closely with the clients’ IT and security teams to ensure smooth implementations.
• Develop detection scenarios and alerts for Sygnia's XDR solution (Velocity) to ensure effective threat detection and response.
• Oversee Velocity KPIs and measurements set by the client, adjusting, analyzing and maintaining them according to their needs and tracking the impact of the platform on the client's networks, endpoints, applications, and cloud environments.
• Continuously improve Velocity monitoring capabilities and keep up-to-date with the latest developments in the cyber threat landscape.
• Provide technical support and guidance to clients on Velocity security-related issues, including implementing security best practices and ensuring compliance with industry standards.

• At least 4 years of hands-on experience as a Cyber Security Engineer in the cyber security industry.
• Relevant experience may include working as a SOC/MSSP Integrator, SOC/MSSP Tier 3 Analyst with integration experience, or Cyber Security Engineer role.
• Very high proficiency in English (written and spoken).
• Experience in implementing EDR, SIEM, email security, WAF, NAC, and firewall cyber security solutions. 
• Experience with providing technical guidance and support to global clients.
• Familiarity with log collection methodologies and systems, auditing policies, and maintaining visibility across networks, hosts, and cloud environments.
• Deep understanding and proven experience working with cloud security environments, architectures, and solutions.
• Demonstrated experience working with Linux operating systems (proficiency in Linux command-line tools, including file manipulation, system administration, and troubleshooting).
• Experience working with relational databases, preferably SQL.
• Familiarity with cyber security industry standards and best practices.
• Excellent problem-solving skills and the ability to work independently.
• Advanced familiarity with the cybersecurity threat landscape and attack scenarios.
• Excellent communication skills, including strong ability to elaborate on a technical idea.
• Proven experience with OT environments – significant advantage.