Senior Cybersecurity Defense Specialist

Overview

In this role you will design, implement, and manage security technologies globally to strengthen TD SYNNEX’s cyber protection. You will lead as a technical expert on security projects across the enterprise, shaping defenses and incident response. Expect to work across SIEM, SOAR, AI-enabled detection, and threat hunting to improve protection in on-premise and cloud environments. You will collaborate with cross-functional teams to document procedures and train staff. This is a chance to drive scalable security automation at an enterprise level.

Compensaciones / Beneficios

• Elective country-specific benefits
• Career development programs
• Life Empowerment and well-being initiatives
• Diversity, Equity & Inclusion
• Global onboarding program
• Community and volunteer activities

Responsabilidades

• Develop and deploy AI-powered detection rules using ML anomaly models, Sigma/SPL/KQL, and behavioral analytics
• Build intelligent SOAR playbooks leveraging LLM reasoning for dynamic decision-making
• Implement and tune AI-driven alert triage systems with automated scoring and routing
• Manage SIEM components including index optimization, search performance, and data model maintenance
• Design prompt engineering frameworks and evaluation harnesses for security-focused LLM apps
• Build RAG pipelines using internal knowledge bases, runbooks, and threat intel
• Conduct AI-augmented threat hunting using LLMs for hypotheses and ML for anomaly detection at scale
• Develop and maintain CI/CD pipelines for detection rules, playbooks, and ML model deployments
• Technical design, implementation and support for security technologies (30%)
• Improve core security processes such as vulnerability management, threat analysis, monitoring and incident response, identity and access management (10%)
• AppSec reviews, penetration testing and red teaming to identify gaps and improve detection and automation (20%)
• Process automation and training to improve team efficiency (20%)
• Data analytics and KPI reporting for controls health (10%)
• Collects and analyzes evidence for breaches and investigations (10%)

Requisitos principales

• Bachelor’s degree with IT field of study
• 8–10 years of relevant experience
• 5+ years in security engineering with cross-domain experience (SIEM + SOAR or SIEM + Detection)
• Proficiency in SIEM query languages (SPL, KQL) and SOAR playbook development (Python, low-code platforms)
• Experience building/integrating AI/ML models for security use cases
• Strong Python skills with ML frameworks (scikit-learn, PyTorch) and LLM APIs
• Detection engineering experience (Sigma rules, MITRE ATT&CK mapping, tuning)
• Git-based workflow for detection-as-code and infrastructure-as-code
• Clear communication
• Leadership and initiative
• Time management and organization
• SPL
• KQL
• Sigma