Senior Security Engineer

The Senior Security Engineer leads Sycomp's day-to-day security function and is accountable for detecting, responding to, and reducing cyber risk across a global workforce of approximately 700 employees. This is a hands‑on leadership role responsible for owning and operating the SIEM, SOC tooling, EDR, and incident response program while setting policy, directing remediation, and coordinating penetration testing. The role reports directly to the Chief Information Security Officer (CISO) and serves as the operational lead for security across all regions.

This is a full‑time, exempt position with occasional travel of up to 10%. The work location and arrangement are to be confirmed.

Sycomp is a global IT services and logistics provider with extensive expertise in cloud, data center, endpoint management and security solutions. Sycomp’s diverse team of consultants and engineers deliver on the company’s mission to tackle challenging global IT projects through its state‑of‑the‑art integration and warehouse centers and global technology partnerships. Headquartered in the heart of Silicon Valley, California, Sycomp has successfully shipped, deployed and managed complex IT projects and supporting assets in more than 150 countries, helping its Fortune 500 customers and global partners realize a world without boundaries.

Visit  for more information.

• Security Leadership and Program Management: Manage the overall security function day to day, translating the CISO's strategy into operations, priorities, and budget recommendations.
• Coordinate with managed security service providers (MSSPs) and other vendors.
• Define and report security metrics and KPIs, including mean time to detect and respond, alert volumes, and patch and vulnerability SLAs, to the CISO and leadership.
• Serve as the primary security point of contact for IT, engineering, legal, HR, and business leaders across all regions.
• SIEM and Security Operations: Own the administration, tuning, and health of the SIEM, including log source onboarding, parsing, correlation rules, and retention.
• Manage SOC tooling, including SOAR, threat intelligence platforms, and case management, and build playbooks and automation to improve efficiency.
• Oversee 24x7 monitoring coverage across time zones through an in‑house, MSSP/MDR, or hybrid model.
• Develop and maintain detection content mapped to frameworks such as MITRE and continuously reduce false positives.
• Endpoint Detection and Response: Administer the EDR platform across all corporate endpoints and servers globally, ensuring deployment coverage, configuration, and current policies.
• Investigate EDR detections, perform containment actions, conduct threat hunting, and partner with IT to harden endpoint configurations and close coverage gaps.
• Alert Triage and Remediation: Personally triage, investigate, and remediate alerts from SIEM, EDR, email security, cloud, and identity tools.
• Drive vulnerability remediation with IT and system owners, track findings to closure, elevate overdue risk, and maintain clear service levels and escalation paths.
• Incident Response: Own the incident response plan and lead response from detection through containment, eradication, recovery, and lessons learned.
• Coordinate with legal, HR, communications, executives, forensics firms, law enforcement, cyber insurers, and other external parties as needed.
• Plan and run tabletop exercises at least annually, update incident response playbooks, and support breach notification and regulatory reporting obligations across applicable jurisdictions.
• Penetration Testing and Vulnerability Management: Plan, scope, and manage internal and third‑party penetration tests of networks, applications, and cloud environments.
• Perform…