Senior Security Engineer

Role Overview

The Senior Security Engineer leads Sycomp's day-to-day security function and is accountable for detecting, responding to, and reducing cyber risk across a global workforce of approximately 700 employees. This is a hands-on leadership role responsible for owning and operating the SIEM, SOC tooling, EDR, and incident response program while setting policy, directing remediation, and coordinating penetration testing. The role reports directly to the Chief Information Security Officer (CISO) and serves as the operational lead for security across all regions. This is a full-time, exempt position with occasional travel of up to 10%. The work location and arrangement are to be confirmed.

About Sycomp

Sycomp is a global IT services and logistics provider with extensive expertise in cloud, data center, endpoint management and security solutions. Sycomp’s diverse team of consultants and engineers deliver on the company’s mission to tackle challenging global IT projects through its state-of-the-art integration and warehouse centers and global technology partnerships. Headquartered in the heart of Silicon Valley, California, Sycomp has successfully shipped, deployed and managed complex IT projects and supporting assets in more than 150 countries, helping its Fortune 500 customers and global partners realize a world without boundaries. Visit sycomp.com for more information.

Key Responsibilities

• Security Leadership and Program Management: Manage the overall security function day to day, translating the CISO's strategy into operations, priorities, and budget recommendations.
• Coordinate with managed security service providers (MSSPs) and other vendors.
• Define and report security metrics and KPIs, including mean time to detect and respond, alert volumes, and patch and vulnerability SLAs, to the CISO and leadership.
• Serve as the primary security point of contact for IT, engineering, legal, HR, and business leaders across all regions.
• SIEM and Security Operations: Own the administration, tuning, and health of the SIEM, including log source onboarding, parsing, correlation rules, and retention.
• Manage SOC tooling, including SOAR, threat intelligence platforms, and case management, and build playbooks and automation to improve efficiency.
• Oversee 24x7 monitoring coverage across time zones through an in-house, MSSP/MDR, or hybrid model.
• Develop and maintain detection content mapped to frameworks such as MITRE and continuously reduce false positives.
• Endpoint Detection and Response: Administer the EDR platform across all corporate endpoints and servers globally, ensuring deployment coverage, configuration, and current policies.
• Investigate EDR detections, perform containment actions, conduct threat hunting, and partner with IT to harden endpoint configurations and close coverage gaps.
• Alert Triage and Remediation: Personally triage, investigate, and remediate alerts from SIEM, EDR, email security, cloud, and identity tools.
• Drive vulnerability remediation with IT and system owners, track findings to closure, escalate overdue risk, and maintain clear service levels and escalation paths.
• Incident Response: Own the incident response plan and lead response from detection through containment, eradication, recovery, and lessons learned.
• Coordinate with legal, HR, communications, executives, forensics firms, law enforcement, cyber insurers, and other external parties as needed.
• Plan and run tabletop exercises at least annually, update incident response playbooks, and support breach notification and regulatory reporting obligations across applicable jurisdictions.
• Penetration Testing and Vulnerability Management: Plan, scope, and manage internal and third-party penetration tests of networks, applications, and cloud environments.
• Perform hands-on testing and validation where appropriate, verify remediation, run the vulnerability scanning program, and prioritize findings by risk and business impact.
• Policy, Governance, and Compliance: Create, maintain, and communicate security policies, standards, and procedures, including acceptable use, access control, incident response, and data protection.
• Support compliance with ISO 27001, NIST CSF, SOC 2, CIS Controls, GDPR, and other relevant regional privacy laws.
• Respond to customer and partner security questionnaires and audits, support third-party risk assessments, and support security awareness training and phishing simulation programs for a global workforce.

Required Qualifications

• Bachelor's degree in cybersecurity, computer science, information systems, or a related field, or equivalent practical experience.
• At least 5 years of hands-on information security experience, including at least 2 years leading a security team, function, or major program.
• Deep hands-on experience administering and tuning a SIEM such as Microsoft Sentinel, Splunk, QRadar, LogRhythm, Elastic, or a similar platform.
• Hands-on experience with an EDR/XDR platform such as CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or a similar platform.
• Proven experience leading incident response for real-world security incidents, including ransomware, phishing, and account compromise.
• Experience planning and managing penetration tests and running a vulnerability management program using tools such as Tenable, Qualys, or Rapid7.
• Experience writing security policies and standards aligned with NIST CSF, ISO 27001, or CIS Controls.
• Solid knowledge of networking, Windows and Linux, Active Directory/Entra ID, and cloud platforms such as Azure, AWS, and Microsoft 365.
• Strong communication skills with the ability to explain technical risk to executives and non-technical colleagues.
• Ability to support a global organization across multiple time zones, including participation in an on-call rotation for critical incidents.

Preferred Qualifications

• One or more industry certifications, such as CISSP, CISM, GIAC (GCIH, GCIA, GCFA, or GPEN), OSCP, CompTIA CySA+ or CASP+, or vendor SIEM/EDR certifications.
• Experience in a value-added reseller, managed services provider, systems integrator, or similar IT services environment.
• Experience managing an MSSP or MDR relationship and holding providers to defined service levels.
• Scripting or automation skills in PowerShell, Python, KQL, or SPL for detection engineering and SOAR playbooks.
• Experience with digital forensics, malware analysis, or threat hunting.
• Familiarity with international privacy and security regulations, including GDPR, UK GDPR, and CCPA, and customer audit requirements such as SOC 2 or ISO 27001 certification.
• Experience with identity security, email security, and cloud security posture management tools.

Key Competencies

• Hands-on Technical Depth: Comfortable working in security tools daily.
• Calm Under Pressure: Makes sound decisions quickly during active incidents.
• Risk-Based Judgment: Prioritizes effort by business impact rather than alert volume.
• Leadership and Influence: Builds a capable team and gains cooperation from IT and business owners without direct authority.
• Clear Communication: Writes concise policies, incident reports, and executive updates.
• Global Mindset: Works effectively across cultures, regions, and time zones.

What Success Looks Like in the First Year

• Within 90 Days: Complete an inventory of security tooling, log sources, and EDR coverage, with a gap assessment and prioritized roadmap agreed with the CISO.
• Within 6 Months: Tune the SIEM with a measurable reduction in false positives, document alert triage and escalation procedures, and test an updated incident response plan through a tabletop exercise.
• Within 12 Months: Establish near-complete EDR coverage, publish an approved core policy set, complete at least one third-party penetration test with critical findings remediated, and implement regular security metrics reporting.

Working Conditions

• Primarily office- or remote-office-based, with extended hours and on-call availability during security incidents.
• Occasional travel to company locations or vendor sites, up to 10%.

This position is remote within the United States. Candidates must reside in one of the following approved states: AL, AZ, AR, CA, CO, CT, DE, FL, GA, ID, IL, IN, KY, ME, MD, MN, NV, NJ, NY, NC, OH, OR, SD, TX, UT, VA, or WA.

Compensation: 130,000 - 150,000 annual depending on experience.

Why Join Sycomp?

Technology Means the World to Us

Technology connects people, enables business, fosters innovation, and helps organizations operate without boundaries. Every day, Sycomp’s diverse team delivers on the company’s mission to help customers and partners navigate the complexity of global IT—from cloud and data center computing to cyber security, networking, and integration and logistics across more than 150 countries.

If you thrive in a growth-minded and values-driven culture, Sycomp may be your next career adventure. At Sycomp, you will have the opportunity to work in a global setting, collaborate with cross-functional teams, and be part of a dynamic and growing organization.

Sycomp is known for its strong culture and commitment to employee growth. With a 93% company-wide retention rate, we foster an environment where people can make a meaningful impact, develop professionally, and build rewarding careers over the long term.

Learn more about Sycomp and our employee benefits at: https://sycomp.com/careers/

Equal Opportunity Statement

Sycomp is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status, veteran status, or any other protected characteristic.

Sycomp will provide reasonable accommodation for qualified individuals with disabilities as needed. If you need assistance or an accommodation in applying, please contact our Human Resources Department at [email protected].

Sycomp may use automated tools, including artificial intelligence, to support certain aspects of the recruitment process, such as reviewing applications or identifying relevant experience. These tools assist our teams, and all hiring decisions are made following human review.