DescriptionThe RoleSygnia is looking for a
Cyber Security Engineer with a strong technical background in cybersecurity to lead the implementation of Sygnia's Velocity XDR platform and ensure our clients' security monitoring and detection needs are met.
As a Cyber Security Engineer supporting Sygnia's growing MDR operation in the United States, you will play a key role in in onboarding new clients, integrating their security environments with Velocity, developing and maintaining detection scenarios, analyzing client environments, and providing technical guidance throughout the customer lifecycle.
The ideal candidate combines strong hands-on technical skills with the ability to work directly with clients and internal teams. You should be comfortable working across complex enterprise environments, troubleshooting integrations, and translating technical requirements into effective security monitoring and detection capabilities.
What You'll Do- Lead the onboarding process for new clients joining Sygnia's MDR services, working closely with client IT and security teams to ensure successful implementation and transition into ongoing monitoring.
- Develop, configure, and maintain detection scenarios, alerts, and monitoring capabilities within Sygnia's Velocity XDR platform to support effective threat detection and response.
- Analyze client environments and security requirements to determine the appropriate data sources, integrations, and monitoring capabilities needed to provide effective visibility.
- Oversee and analyze Velocity KPIs and client-defined measurements, making adjustments based on evolving security requirements and tracking the impact of the platform across client networks, endpoints, applications, and cloud environments.
- Troubleshoot technical onboarding and integration issues, working with clients and internal teams to resolve challenges and maintain reliable security visibility.
- Continuously improve Velocity monitoring capabilities and stay current with emerging threats, attack techniques, and developments in the cyber threat landscape.
- Provide technical support and guidance to clients on Velocity and security monitoring-related issues, including recommendations for security best practices and improvements.
- Collaborate with MDR analyst, incident responders, product and platform teams, and other technical stakeholders to improve detection capabilities and the overall client experience.
- Identify opportunities to improve monitoring, visibility, automation, and operational efficiency across client environments.
RequirementsWhat We're Looking For- At least 5 years of hands-on experience as a Cyber Security Engineer or in a similar technical cybersecurity role.
- Proven experience in MXDR, MDR, SOC, MSSP, or similar security operations environments, including roles such as SOC/MSSP Integrator, Tier 3 Analyst, Detection Engineer, or MDR Cyber Security Engineer.
- Experience implementing and operating SIEM, EDR, and/or XDR platforms, including client onboarding and ongoing operational support.
- Hands-on experience with log ingestion, data source onboarding, integrations, and maintaining visibility across endpoints, servers, networks, and cloud environments.
- Familiarity with log collection methodologies, parsing, auditing policies, and maintaining security visibility across complex enterprise environments.
- Experience providing technical guidance and support directly to enterprise clients.
- Strong experience working with Linux operating systems, including command-line tools, file manipulation, system administration, and troubleshooting.
- Experience working with relational databases, preferably SQL.
- Familiarity with cybersecurity industry standards, security controls, and best practices.
- Ability to communicate effectively in Spanish at a conversational or professional working level, particularly when supporting Spanish-speaking clients or stakeholders.
- Excellent problem-solving skills and the ability to work independently.
- Strong understanding of the cybersecurity threat landscape, attack techniques, and common attack scenarios.
- Excellent communication skills, with the ability to explain complex technical concepts clearly to both technical and non-technical stakeholders.
- Basic Python scripting experience for automation, enrichment, or tooling.
Bonus Points For- Experience implementing or working with additional security technologies such as email security, WAF, NAC, firewalls, identity and access management (IAM), and cloud security controls.
- Experience with security automation, detection engineering, or development of security tooling.
- Advanced experience with cloud security across AWS, Azure, or Google Cloud Platform.
- Experience working with OT or industrial control environments.
- Experience supporting global enterprise clients across multiple industries and technical environments.
- Relevant cybersecurity certifications or equivalent hands-on technical experience.
Why Sygnia- Work directly with Sygnia's proprietary Velocity XDR platform, built by cybersecurity professionals with real-world incident response experience.
- Gain exposure to complex enterprise environments and real-world attacks across a diverse global client base.
- Work alongside experienced MDR analysts, incident responders, threat hunters, and cybersecurity experts.
- Play a hands-on role in building and improving security monitoring and detection capabilities as Sygnia's U.S. MDR operation continues to grow.
- Work on technically challenging problems that go beyond traditional SOC monitoring.
- Develop your expertise across detection engineering, security integrations, threat detection, incident response, and enterprise security environments.
- Join a team that values technical excellence, curiosity, collaboration, and continuous learning.
