1 day ago
Remote, India or Mexico City, MexicoSenior
Responsibilities
- Design, implement, enhance, and support security technologies globally.
- Improve vulnerability management, threat analysis, security monitoring, incident response, and identity and access management processes.
- Conduct AppSec reviews, penetration testing, and red teaming, and apply findings to improve detection and response automation.
- Develop AI-powered detection rules using ML anomaly models, LLM-generated Sigma/SPL/KQL, and behavioral analytics.
- Build and tune SOAR playbooks and automated alert triage systems using LLM reasoning and ML classifiers.
- Manage SIEM components, including index optimization, search performance, and data model maintenance.
- Design prompt engineering frameworks, evaluation harnesses, and RAG pipelines for security-focused LLM applications.
- Perform AI-augmented threat hunting and maintain CI/CD workflows for detection rules, playbooks, and ML model deployments.
- Document operating procedures and runbooks, train support teams, report operational KPIs, and analyze computer-related evidence for investigations.
Requirements
- Bachelor's degree in an IT field is required.
- 8 to 10 years of relevant work experience is required.
- At least 5 years of security engineering experience with cross-domain experience such as SIEM plus SOAR or SIEM plus detection.
- Proficiency in SIEM query languages SPL and KQL and in SOAR playbook development using Python or low-code platforms.
- Experience building or integrating AI/ML models for security use cases.
- Strong Python skills and familiarity with scikit-learn, PyTorch, and LLM APIs.
- Detection engineering experience with Sigma rules, MITRE ATT&CK mapping, and rule-tuning methodologies.
- Git-based workflow proficiency for detection-as-code and infrastructure-as-code.
- Security and technology certifications and/or equivalent proven work experience are valued.
- Strong communication, presentation, leadership, organizational, analytical, interpersonal, and independent-working skills are required.
Benefits
- Elective benefits are tailored to the employee's country and lifestyle.
- Formal leadership and professional development programs and on-demand courses support career growth.
- Financial, physical, and mental well-being support is provided through seminars, events, and the global Life Empowerment Assistance Program.
- The company offers diversity, equity, and inclusion initiatives, peer communities, volunteering, environmental and social activities, onboarding networking, and business resource groups.
- The role may require occasional non-standard work hours or overtime, on-call availability, and some travel.
Categories
About TD SYNNEX
TD SYNNEX distributes IT hardware, software, and cloud services and aggregates solutions for technology vendors and resellers, including VARs and system integrators. It provides logistics, financing, cloud marketplaces, and professional services that help partners procure, bundle, and deploy technology for end customers. The public company (NYSE: SNX), headquartered in Fremont, California, was formed in 2021 through the merger of Synnex and Tech Data and operates globally.