Cyber Security Engineer

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading-edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats. Learn more at Sygnia.co

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force", Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia's managed MDR is a high-end, 24/7 fully-managed security operations service that includes monitoring, threat detection, forensic analysis, accelerated investigation, and rapid transition to incident response when an attack is detected. The service is powered by Velocity XDR, a unified security detection and response platform that was built by Sygnia responders and has been battle-tested defending clients against thousands of real-world attacks. This position is based in Singapore and will primarily support enterprise clients in the Philippines, collaborating closely with their local IT and security teams.

Sygnia is looking for a Cyber Security Engineer with a solid technical background in cyber security to lead the implementation of Sygnia’s Velocity XDR product and ensure that Sygnia meet its clients’ cyber security needs.

As a Cyber Security Engineer in a fast-expanding operation team, you will be responsible for onboarding new global clients to the MXDR services, developing and maintaining detection scenarios and alerts, analyzing the client's environment, and providing technical support and guidance to clients. To excel in this role, you will demonstrate strong technical aptitude, dedication to delivering high-quality work, and a cooperative approach to teamwork.  

Main Responsibilities:

• Lead the onboarding process for all new clients joining the MDR services, working closely with the clients’ IT and security teams to ensure smooth implementations.
• Develop detection scenarios and alerts for Sygnia's XDR solution (Velocity) to ensure effective threat detection and response.
• Oversee Velocity KPIs and measurements set by the client, adjusting, analyzing and maintaining them according to their needs and tracking the impact of the platform on the client's networks, endpoints, applications, and cloud environments.
• Continuously improve Velocity monitoring capabilities and keep up-to-date with the latest developments in the cyber threat landscape.
• Provide technical support and guidance to clients on Velocity security-related issues, including implementing security best practices and ensuring compliance with industry standards.

Main Requirements:

• At least 5 years of hands-on experience as a Cyber Security Engineer in the cyber security industry.
• Proven experience in MXDR / MDR / SOC / MSSP environments, including roles such as SOC/MSSP Integrator, Tier 3 Analyst, Detection Engineer, or MDR Cyber Security Engineer.
• Experience in implementing SIEM, EDR, and/or XDR platforms, including onboarding and operational use.
• Hands-on experience with log ingestion, data source onboarding, and integrations, including collecting, parsing, and maintaining visibility across endpoints, servers, network, and cloud environments.
• Very high proficiency in English (written and spoken).
• Ability to work effectively with stakeholders in the Philippines. Proficiency in Filipino (Tagalog) or another major Philippine language is a strong advantage, given the client base, but is not a strict requirement. Candidates without Philippine language skills are still encouraged to apply.Familiarity with log collection methodologies and systems, auditing policies, and maintaining visibility across networks, hosts, and cloud environments.
• Experience with providing technical guidance and support to global clients.
• Demonstrated experience working with Linux operating systems (proficiency in Linux command-line tools, including file manipulation, system administration, and troubleshooting).
• Experience working with relational databases, preferably SQL.
• Familiarity with cyber security industry standards and best practices.
• Excellent problem-solving skills and the ability to work independently.
• Advanced familiarity with the cybersecurity threat landscape and attack scenarios.
• Excellent communication skills, including strong ability to elaborate on a technical idea.
• Basic Python scripting experience for automation, enrichment, or tooling - significant advantage.
• Experience implementing or working with additional security technologies such as email security, WAF, NAC, firewalls, identity and access management (IAM), and cloud security controls – advantage.
• Proven experience with OT environments – advantage.