Sygnia

Description FP&A Analyst Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force," Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Our FP&A team is growing and we are looking for an experienced FP&A Analyst to join the finance team. this function will report to the FP&A Director in Israel. Main responsibilities • Monitor and analyze performance KPIs and metrics to support and measure achievement of the company’s strategy and operational plans. • Provide management and business leaders with visibility and analysis of the company’s business trends to support business decisions. • Provide periodic and ad-hoc analysis and reporting and analysis. • Prepare annual budget, collaborate with all budget owners and stakeholders to achieve reliable planning and full visibility of the company’s business and performance. • Track and analyze actual performance vs budget. • Lead multiple projects simultaneously and prioritize them based on clear goals and business needs. • Use AI tools and automation, including lightweight AI agents and workflows, to optimize FP&A activities such as data gathering, reconciliations, variance analysis, forecasting and management reporting, improving data quality and reducing manual work with appropriate human review and controls. Requirements • +3 years of experience as FP&A, within a global high growth company • Bachelor’s degree in Economics, Accounting, Business Management or other relevant field • Positive attitude, ability to work independently, self-learn and adapt to a fast-changing environment • A pleasant yet assertive business partner to the company management and budget owners • Strong analytical and problem-solving skills • Ability to manage multiple priorities and communicate complex analyses and models in a clear and simple way. • Hands-on; highly organized, detail-oriented, and mindful to deadlines • Advanced knowledge of Microsoft Excel – a must • Experience working with relevant software and systems: Netsuite, PowerBI, Hubspot – advantage. • Practical experience using generative AI tools, workflow automation platforms or building AI agents to turn repetitive FP&A activities into efficient, scalable and well-controlled automated processes. • Curiosity and willingness to learn new AI capabilities and apply them responsibly to confidential financial and business data. • Fluent English – written and verbal.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Cyber threats are constantly growing in volume, velocity and sophistication. When an organization is confronted with an advanced attack, it needs the strongest capabilities on its side. In many cases, an incident response engagement is in fact a battle within a network. The operational art, experience focus and speed of Sygnia response teams can mean the difference between a minor blow and a devastating impact on performance and reputation of organizations. Sygnia is looking for highly capable Incident Response Expert. The Incident Response Expert role includes conducting in-depth forensic analysis, investigation and response to real-world cyber threats. A significant part of our investigations is performed onsite at the client location, in collaboration with the client’s IT and security teams. Main Responsibilities • Participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics and malware analysis. • Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations. • Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred. • Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack. • Collaborate with IT and Security teams during investigations. • Generate and present a comprehensive and professional report of findings from investigations. Requirements Main Requirements: • At least 3 years of a relevant experience (from military service and/or industry). • Bright, curious and determined team player, who strive for excellency. • Problem solver, in-depth thinker with growth mindset. • Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration. • Deep technical understanding of network fundamentals and common Internet protocols. • Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts. • Fluency with one or more scripting language (i.e. Python). • Multidisciplinary knowledge and competencies, such as: • Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL). • Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms. • Experience with malware analysis and reverse engineering. • Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight). • Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Sygnia is looking for an experienced Incident Response Team Leader (IR TL) to lead incident response investigations and security assessment projects for clients worldwide. This is a leadership role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization. The role combines hands-on technical leadership, team management, client engagement and project leadership. The IR TL will lead and mentor highly skilled cyber security researchers and forensic experts while managing complex investigations and helping clients respond to sophisticated cyber threats. Following a substantial and successful tenure in the position, the IR TL will have opportunities for continued professional growth and advancement across a variety of technical, managerial and client-facing roles within Sygnia. Main Responsibilities • Lead a team of top-tier cyber security researchers and forensic experts conducting assessments and in-depth analysis in complex investigations, as well as security assessments. • Guide and empower team members, enhancing their technical and research skills. • Lead client-facing projects including incident response and hunting efforts for large-scale sophisticated attacks, to contain and defeat real-world cyber threats. • Collaborate and work with clients’ IT and Security teams during investigations. • Design and improve internal incident response technologies, methodologies, and processes. Requirements Main Requirements • At least 3 years of senior-level experience leading or conducting incident response investigations and research in a professional cybersecurity environment, within the civilian sector. • Experience conducting incident response investigations and research in a professional cybersecurity environment, including direct client-facing experience, preferably within the civilian sector. • Excellent English – spoken and written. • In-depth understanding of the lifecycle of advanced security threats, attack vectors and methods of exploitation. • Strong technical understanding of network fundamentals, common internet protocols and system and security controls. • Experience with the tools and techniques used in security event analysis, incident response, computer forensics, malware analysis, or other areas of security operations. • Multidisciplinary knowledge and competencies, such as: • Hands-on experience in data analysis, preferably network traffic or log analysis, using relevant data analysis and data science platforms such as Jupyter, Splunk, pandas and SQL. • Familiarity with cloud infrastructure, web applications and servers, and Android and iOS mobile platforms. • Experience with malware analysis and reverse engineering. • Familiarity with enterprise SIEM platforms, such as Splunk, QRadar and ArcSight. • Exceptional reporting and analytics abilities, as well as strong written and oral presentation skills. The ability to articulate complex technical issues in a concise and confident manner and provide status updates to a variety of audiences, including technical personnel and executive-level management. • Ability to work in a dynamic matrix organizational structure, with people across all levels of the company, including executives and technical stakeholders. • Team-oriented, with excellent communication skills. • Decisive, bright and positive leader who strives for excellence. • Previous experience in strategy or cybersecurity consulting – an advantage. • Willingness to travel abroad as required. • Willingness to work irregular hours, including evenings, nights, weekends and holidays, as required by incident response engagements.

Description Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Our Technology division builds a world class product, considered by experts as the leading XDR platform for cyber analytics and investigations. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels. Sygnia is looking for a Senior DevOps Engineer with deep AWS expertise and strong hands-on experience with Kubernetes, GitOps, and Infrastructure as Code. In this role, you will design, automate, and scale secure, highly available infrastructure and CI/CD pipelines supporting Sygnia’s flagship product. Beyond hands-on engineering, you will play a key role in shaping platform architecture, driving DevOps best practices, mentoring engineers, and continuously improving the reliability, scalability, and efficiency of our production environments. Responsibilities • Architect and manage secure, scalable, and highly available AWS environments, including multi-account and multi-region architectures. • Design and implement GitOps-driven CI/CD processes using ArgoCD, Argo Workflows, GitHub Actions, and related tooling. • Lead Infrastructure as Code (IaC) practices using Terraform and additional technologies such as Pulumi and Crossplane. • Build, operate, and maintain production-grade Kubernetes (EKS) environments, including Helm-based deployments and cluster lifecycle management. • Automate infrastructure provisioning, application deployment, and operational workflows across development, staging, and production environments. • Drive DevSecOps practices, including security scanning, secrets management, and compliance automation. • Establish and continuously improve monitoring, logging, and observability using tools such as Datadog, Prometheus, Grafana, and OpenTelemetry. • Partner closely with development teams to enable seamless application integration and rapid, reliable software delivery. • Optimize infrastructure for scalability, resilience, performance, and cost efficiency. • Mentor engineers, promote DevOps best practices across teams, and contribute to platform and architecture decisions. • Participate in and continuously improve the on-call rotation supporting mission-critical production systems. Requirements Main Requirements • 5+ years of experience as a DevOps Engineer in complex production environments. • 3+ years of hands-on cloud experience, preferably with AWS, with strong knowledge of services such as EKS, EC2, S3, RDS, ElastiCache, SQS, VPC, and Route 53. • Proven experience designing secure, scalable, and highly available cloud architectures, including multi-account environments. • 3+ years of hands-on Kubernetes experience, including Helm, operators, and production-grade cluster management. • Strong experience with CI/CD and GitOps practices using ArgoCD and/or GitHub Actions. Experience with Argo Workflows is a strong advantage. • 3+ years of hands-on experience with Terraform. • Strong scripting and automation skills using Python and/or Bash. • Experience executing infrastructure and DevOps projects end-to-end in enterprise-scale environments. • Extensive experience using AI-powered development and engineering tools such as Claude Code, Codex, Cursor, or similar tools to improve productivity, automation, troubleshooting, and software delivery. • Excellent problem-solving, communication, and collaboration skills. • Strong ownership, hands-on approach, and ability to operate independently. • Passion for continuous learning, innovation, knowledge sharing, and mentoring others. Advantages • Experience with Pulumi and/or Crossplane. • Experience with Argo Workflows. • Experience with monitoring and observability platforms such as Datadog, Prometheus, Grafana, and OpenTelemetry. • Experience implementing DevSecOps practices, including security scanning, secrets management, and compliance automation. • Experience designing and operating multi-region AWS environments.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Cyber threats are constantly growing in volume, velocity and sophistication. When an organization is confronted with an advanced attack, it needs the strongest capabilities on its side. In many cases, an incident response engagement is in fact a battle within a network. The operational art, experience focus and speed of Sygnia response teams can mean the difference between a minor blow and a devastating impact on performance and reputation of organizations. We are looking for a hands-on AI Solutions Engineer who combines practical AI expertise with strong business applications, integration and automation capabilities. The ideal candidate will be able to identify organizational needs and translate them into scalable AI solutions, including AI agents, agentic workflows and deterministic integrations. They will drive the effective adoption of AI across the company by developing practical solutions that improve processes, productivity, decision-making and overall business impact. Main Responsibilities: • Partner with cross-functional teams to identify high-impact AI and automation opportunities. • Evaluate and select AI models, platforms, and tools (e.g., OpenAI, Claude, Azure AI, AWS Bedrock) based on use case, performance, cost, security, and scalability. • Design and implement AI solutions combining LLMs, AI agents, and deterministic integrations (e.g., Workato). • Build and optimize prompts, agentic workflows, and integrations while understanding model limitations and trade-offs. • Architect scalable integrations across enterprise systems such as NetSuite, HubSpot, Monday.com, and other internal platforms. • Lead AI initiatives end-to-end, from ideation and prototyping through production rollout and continuous improvement. • Evaluate emerging AI capabilities and new AI features within existing enterprise platforms. • Own and communicate the company's internal AI solutions, ensuring alignment with business needs, systems, and broader AI architecture. Requirements Main Requirements: • 3+ years of experience with business applications and integrations. • 1+ years of hands-on experience building or implementing AI solutions. • Strong practical experience with AI platforms such as OpenAI, Claude, Azure Open AI, and AWS Bedrock. • Hands-on experience with AI development, automation, and integration tools, including Workato or similar iPaaS platforms. • Strong understanding of prompt engineering, LLM capabilities and limitations. • Proven ability to take AI solutions from concept and prototype through production. • Understanding of security best practices, AI safety, responsible AI, and governance. • Strong problem-solving and solution-oriented mindset, with a focus on practical business outcomes. • Excellent communication and presentation skills, with the ability to work cross-functionally and translate between business and technical stakeholders.

Description Sygnia is a global cyber readiness and response team that helps organizations beat attackers and stay secure. We combine creative thinking, deep technical expertise and battle-tested experience to strengthen resilience and guide organizations through high pressure situations. Our specialists come from elite military technology units and leading roles across the cyber industry. We support clients at every stage of their security journey and bring the mindset, tools and experience needed to help them stay ahead of evolving threats. The Role We are looking for an Account Executive for EMEA who will focus on the IL and MENA regions and independently lead a portfolio of clients as part of our Sales team. The person in this role will act as a trusted advisor, drive new business opportunities and help clients strengthen their security posture with confidence and clarity. This role will own a specific revenue target for the region and will be accountable for opportunity growth and client retention. What You Will Do • Drive business opportunities in your region by attending events and client workshops, developing proposals and sales collateral and leading business development discussions. • Work with existing clients to identify additional needs and scope future engagements. • Maintain strong relationships with technical teams and senior leadership to anticipate requirements and set expectations around Sygnia services. • Build and maintain long term partnerships with leading multinational organizations and serve as their trusted advisor. • Partner closely with Sygnia engagement teams to develop and review deliverables. Present status updates to diverse audiences that include technical teams, CISOs, CIOs, CTOs and executive leadership. • Participate in internal capability building, methodology development and broader strategic planning. Why Sygnia Sygnia offers the opportunity to work with some of the most skilled cyber professionals in the world. You will partner with organizations facing complex challenges and play a central role in guiding them through fast moving and high impact situations. You will also have room to grow, learn from top experts and contribute to the development of new capabilities that push the industry forward. Requirements Main Requirements: • Proven track record in generating and managing business opportunities in IL & Europe, with specific experience or exposure to the MENA region (as an advantage). • At least seven years of professional experience, including a minimum of four years in strategic consulting or a cyber security leadership role. • Strong client service orientation with exceptional interpersonal skills and the ability to earn trust with clients and partners. • Proactive, independent and hands on work style with the ability to deliver in environments that involve pressure, uncertainty and complexity. • Outstanding written and verbal communication skills and strong presentation abilities. • Strong analytical capabilities with both strategic and detailed thinking. • Experience working in a dynamic matrix environment and collaborating across all levels of an organization. • A positive and flexible mindset with the ability to learn quickly and adapt to change. • Academic degree in a relevant discipline. • Relevant security certifications such as CISSP, CISM, C-CISO or GSTRT are an advantage. • Ability to travel abroad, approximately 25 percent of the time, primarily for client relationship development. • Fluent in Hebrew & English. Bonus Points For • Experience working with multinational organizations headquartered in the MENA region. • Knowledge of regional regulatory expectations and security requirements. • Professional proficiency in Arabic is a strong advantage. • Familiarity with crisis response environments or high pressure advisory work.

Description Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Our Technology division builds a world class product, considered by experts as the leading XDR platform for cyber analytics and investigations. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels. We are looking for a talented, passionate, and experienced Senior GenAI Engineer to join our team. You will design and build production-grade GenAI applications from the ground up, using technologies such as Google ADK, Docker, and AWS (Bedrock, AgentCore etc). We’re looking for someone with a genuine passion for GenAI, strong software engineering skills, hands-on experience developing GenAI solutions, and a collaborative, hands-on approach. You will also work closely with the team’s researchers, helping transform research code and prototypes into reliable, secure, and scalable containerized applications that can be deployed and operated in the cloud. Main Responsibilities: • Design and development of production-grade GenAI applications and agentic systems • Build and operate reliable, secure, and scalable AI-powered services, with a focus on performance, observability, and cost • Drive engineering best practices, including testing, evaluation, CI/CD, code review, and technical design, while contributing to product and technical innovation • Work closely with the team’s researchers to transform research code and prototypes into reliable, containerized applications that can be deployed and operated in the cloud Requirements Main Requirements: • 5+ years of software engineering experience building production systems • 3+ years of professional Python development experience • Hands-on experience designing and developing production GenAI applications • Strong understanding of LLMs, agentic systems, RAG, tool calling, prompt engineering, and evaluation • Experience using GenAI observability tools for tracing, monitoring, evaluating, optimizing and debugging AI applications • Strong experience with Docker and cloud environments (preferably AWS). • Strong coding standards and experience with testing, CI/CD, observability, and production troubleshooting • Strong communication skills and the ability to clearly articulate technical ideas and trade-offs • High proficiency in English, both written and spoken • A collaborative, responsible team player with a genuine passion for GenAI and continuous learning Advantage: • Hands-on experience with Google ADK • Experience defining AWS infrastructure using AWS CDK • Experience with AWS GenAI services such as Amazon Bedrock and Amazon Bedrock AgentCore • Experience developing AI solutions for cybersecurity or security products

Description Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Our Technology group builds Velocity - a world class product for threat detection, investigation and response (TDIR). This system plays a critical role in cyber threat investigations, integrating complex data operations, extensive Python-based analytics, and large-scale database querying using Snowflake. Our product was deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as a part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels. We are seeking a talented Full Stack Developer with strong expertise in Python and SQL to join our dynamic team. The ideal candidate will have substantial backend and data engineering experience, with the capability and willingness to support and develop features across the entire stack. Responsibilities: • Develop, enhance, and maintain backend systems, particularly focusing on Python-based services and advanced SQL queries. • Handle extensive data engineering tasks, including translating Python analytics into optimized Snowflake SQL queries. • Support end-to-end feature delivery, contributing both backend and frontend development as required. • Ensure high-quality coding practices, efficient troubleshooting, and proactive improvement of platform components. • Actively participate in the team’s agile practices, contributing to architecture decisions and overall technical direction. Requirements Main Requirements: • 6+ years of full-stack development experience, with a strong emphasis on Python backend and SQL. • 4+ years of expertise in Python, particularly in developing scalable and high-performance systems. • Extensive experience in writing, optimizing, and maintaining complex SQL queries and working with large-scale databases (preferably Snowflake). • Hands-on experience with modern JavaScript frameworks (ReactJS preferred). • Strong understanding of data engineering practices, database schema design, and data-driven analytics. • Familiarity with DevOps practices, CI/CD pipelines, and cloud infrastructure (AWS preferred). • Excellent communication skills and a collaborative approach to problem-solving. Advantages: • Experience with Kubernetes and Helm. • Background in cybersecurity or data-intensive industries. • Proactive, results-driven mindset with the ability to quickly learn and implement new technologies.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Sygnia is looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status. The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a ‘can-do’ attitude. Responsibilities • Working across all areas of Sygnia’s SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics. • Solving security incidents in accordance with defined service level agreements and objectives. • Prioritizing and differentiating between potential incidents and false alarms. • Addressing clients’ enquiries via phone, email, and live chat. • Working side-by-side with customers, providing insightful incident reports. • Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards. • Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas. • Identifying and offering solutions to gaps in current capabilities, visibility, and security posture. • Correlating information from disparate sources to develop novel detection methods. Requirements Requirements • At least one year of experience in a SOC/MDR or Managed EDR service, including night and weekend shifts. • Strong analytical thinker, problem-solving mindset, and ability to succeed in a dynamic environment. • Independent, bright and positive analyst who strives for excellence. • Proficiency and experience with scripting (Python). • Strong capabilities in drafting cyber security reports for clients. • Basic understanding of the lifecycle of advanced security threats, attack vectors, and methods of exploitation. • Hands-on experience working with SIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.) • Familiarity with common data and log sources for monitoring, detection and analysis (e.g., Event Logs, firewall, EDR). • Strong technical understanding of network fundamentals, common internet protocols, and system and security controls. • Basic knowledge of host-based forensics and OS artifacts. • Familiarity with cloud infrastructure, web application and servers – an advantage. • Fluent English (written, spoken) – a must. Another language – an advantage.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. The Detection Engineer is responsible for designing, validating, optimizing, and continuously improving Sygnia MDR detection content across multiple security domains. This role combines threat research, security analytics, data-driven decision making, and detection engineering to ensure high-fidelity threat detection while minimizing operational noise. The Detection Engineer serves as the bridge between MDR Operations, Product, Engineering, and Threat Research teams, transforming emerging threats, operational insights, and telemetry analysis into scalable and actionable detection capabilities. . Main Responsibilities: • Detection Engineering & Optimization: Design, develop, maintain, and continuously optimize high-fidelity detection logic across endpoint, identity, cloud, email, network, and other security domains, maximizing coverage while minimizing false positives. • Threat Research & Detection Coverage: Research emerging threats, vulnerabilities, and attacker TTPs, translating threat intelligence into actionable detections while identifying and closing gaps in MITRE ATT&CK and ATLAS coverage. • Detection Quality & Performance: Establish detection quality standards, define and monitor performance metrics (precision, false positive rates, alert volume, coverage, and stability), and continuously improve detection effectiveness. • Detection Testing & Validation: Develop testing methodologies, validation frameworks, and lab environments to evaluate detection logic through attack simulations, real-world scenarios, and repeatable testing procedures before production deployment. • Security Data Research & Analytics: Analyze security telemetry, identify data quality and visibility gaps, and collaborate with Product and Engineering teams to improve data collection, normalization, enrichment, and detection capabilities. • AI & Detection Innovation: Research, develop, and evaluate AI agents and AI-powered automation solutions for threat research, security investigations, detection engineering, and alert enrichment, ensuring measurable improvements in detection quality and operational efficiency. • Detection Troubleshooting & Continuous Improvement: Investigate noisy or ineffective detections, perform root cause analysis, refine detection logic, and leverage operational feedback to improve alert quality and reduce analyst workload. • Client-Specific Detection Development: Design and implement customized detection content based on client environments, security requirements, threat profiles, and available telemetry. • Operational Excellence & Strategic Development: Drive initiatives to reduce alert fatigue, accelerate detection tuning, improve analyst efficiency, expand security visibility, and contribute to the long-term detection engineering strategy. Requirements Main Requirements: • 3+ years of experience in Detection Engineering, Threat Hunting, Security Analytics, MDR, Security Research, or related cybersecurity roles. • Experience delivering security detections for products, including hands-on experience creating, implementing, and tuning detection rules in SIEM, XDR, or EDR platforms. • Experience working with large-scale security datasets and telemetry. • Experience with SQL, KQL, Python, or similar analytical tools. • Understanding of security monitoring, detection methodologies, and investigation workflows. • Strong understanding of attacker TTPs and the MITRE ATT&CK and ATLAS framework. • Experience developing AI agents or AI-powered automation solutions. • Strong analytical mindset with the ability to explore, understand, and derive insights from large-scale security datasets. • Experience working with security telemetry across multiple domains, including endpoint, identity, cloud, email, network security, OS internals, EDR, Active Directory, Office 365, Cloud technologies such as AWS, Microsoft Azure and GCP, Network protocols and security products, including experience with security of AI infrastructure and services. • Ability to assess data quality, identify telemetry gaps, and evaluate the feasibility and effectiveness of detection strategies. • Experience evaluating or onboarding new security data sources and telemetry. • Excellent written and verbal communication skills. • Passion for cybersecurity and continuous learning. • Lab building and attack simulation experience. • Threat Hunting experience, including hands-on IR experience – advantage. • Red Team or penetration testing background – advantage • Experience with Detection-as-Code methodologies, including Git-based workflows, version control, automated detection testing, and CI/CD pipelines – An advantage.

Description Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and security teams, senior management, and boards of top organizations worldwide, including Fortune 100 companies. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Our Technology group builds Velocity - a world class product for threat detection, investigation and response (TDIR). This system plays a critical role in cyber threat investigations, integrating high-volume data ingestion, complex analytics, and large-scale querying. Our product is deployed in hundreds of clients, including many Fortune 500 companies, all around the world (from North America through Europe, APAC and all the way to Australia), and as part of the team you will have the privilege to take part in the ongoing fight against cyber threat actors of the highest levels. We are seeking a talented Senior DevSecOps Engineer / Security Architect to act as the primary security owner and focal point for the Velocity R&D organization. The ideal candidate will possess a background in IT and security platforms, strong coding skills, the ability to independently learn new technologies, an unwavering commitment to quality, a collaborative work ethic, and a profound passion for securing complex infrastructures. Main Responsibilities: · Security Strategy & Architecture • Own and continuously improve Velocity’s overall security posture, including risk assessment, prioritization, and long-term planning. • Design and guide secure architectures for new and existing systems and features, aligned with best practices and compliance requirements. • Lead threat modeling efforts and drive proactive validation against emerging attack techniques. • Evaluate, introduce, and develop security solutions tailored to Velocity’s environment. • Design and implement security controls for emerging technologies, including agentic AI systems, addressing risks such as misuse, data leakage, and adversarial manipulation. · Security Engineering & DevSecOps • Embed security across the development lifecycle, including CI/CD pipelines, infrastructure, and application layers. • Enhance logging, auditing, and detection capabilities, and design detection strategies tailored to the platform. • Own and optimize security tooling, ensuring strong integration, visibility, and coverage across systems. · Incident Response & Operations • Investigate and respond to security incidents and alerts, leveraging deep system understanding. • Perform root cause analysis and drive improvements to prevent recurrence. · Collaboration & Enablement • Partner closely with R&D, IT, Product, and the CISO to ensure secure design and day-to-day operations. • Support compliance initiatives (e.g., SOC 2) and security reviews with internal and external stakeholders. • Assist in customer-facing security processes, including questionnaires and evaluations. • Promote security awareness and provide guidance across the organization. Requirements Main Requirements: • 5+ years of experience in DevSecOps, Security Engineering, or related roles within complex production environments. • Experience working in a cybersecurity company or security-focused organization. • Strong hands-on experience with cloud platforms, with a focus on AWS. • Solid experience working with Kubernetes, Docker, and Linux-based systems. • Proven experience integrating security into SaaS development lifecycles (SDLC) and working with monitoring and observability tools. • Experience with Infrastructure as Code (IaC) tools such as Terraform, Pulumi, or similar. • Proficiency in scripting and automation using languages such as Python and/or Bash. • Familiarity with security and IT platforms, including logging, monitoring, and detection systems. • Strong understanding of security principles, threat modeling, and frameworks (e.g., NIST-CSF, CIS, SOC2, MITRE ATT&CK). • Ability to operate independently, take ownership, and drive initiatives end-to-end. • Excellent communication skills, including the ability to operate effectively during high-pressure incidents in a global environment. Advantages: • Hands-on experience with databases and data platforms such as PostgreSQL, Snowflake, Elasticsearch, or Redis. • Background in DevOps / Platform Engineering roles. • Experience in consulting or customer-facing environments.

Description Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber. Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across EMEA. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization. The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within Sygnia. Main Responsibilities • Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats. • Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IRM outside the scope of the project. • Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within Sygnia. • Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders. • Serve as a trusted advisor to clients during high-pressure and business-critical situations. • Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions. • Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services. • Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities. • Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities. Requirements Main Requirements • At least 5 years of experience leading teams through direct management, project-based leadership, matrix management, or a combination of these models. • Proven ability to lead diverse groups of specialists who do not report directly to the role, while maintaining alignment, accountability, and effective execution. • A decisive, intellectually sharp, and positive leader with a strong commitment to excellence. • Calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments. • Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities. • Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to both technical professionals and executive leadership. Additional languages are an advantage. • In-depth understanding of advanced cyber threats, attack vectors, adversary techniques, and exploitation methods. • Strong technical knowledge of network fundamentals, common internet protocols, operating systems, and security controls. • Familiarity with the tools and techniques used in security event analysis, incident response, digital forensics, malware analysis, and broader security operations. • Ability to work in a project-based model involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required. • Willingness to travel internationally as needed. • Previous experience in strategy or cybersecurity consulting is an advantage. • An academic degree in a technological or scientific discipline is an advantage.