Senior Cybersecurity Defense Specialist

TS Mexico; Ciudad de México; Vor Ort; MXN 1.200.000 - 1.800.000; Vollzeit

Zusammenfassung

TD SYNNEX is seeking a Senior Cyber Security Specialist to design, implement, and manage global security solutions across SIEM, SOAR, and AI systems. You will lead multi-disciplinary security projects, improve incident response, and develop runbooks for scalable protection and detection.

The role demands 8–10 years in security engineering, strong Python and ML skills, and experience with Sigma rules and MITRE ATT&CK mappings. Occasional travel and on-call duties apply.

Qualifikationen

• Bachelor's Degree in IT or a related field.
• 8–10 years of relevant work experience.
• 5+ years in security engineering with cross-domain experience (SIEM + SOAR or SIEM + Detection).
• Proficiency in SPL and KQL and SOAR playbook development (Python, low-code platforms).
• Experience building or integrating AI/ML models for security use cases.
• Strong Python skills with ML libraries (scikit-learn, PyTorch) and LLM APIs.
• Detection engineering experience: Sigma rules, MITRE ATT&CK mapping, rule tuning methodology.
• Git-based workflows for detection-as-code and infrastructure-as-code.

Aufgaben

• Technical design, implementation, enhancement and ongoing support for security technologies.
• Execute and continually improve core security processes like vulnerability management, threat analysis, security monitoring and incident response, identity and access management.
• AppSec reviews, penetration testing and red teaming activities to identify gaps and improve detection and response.
• Process automation and orchestration to improve team efficiency; documentation and training.
• Data analytics and KPI reporting to ensure operational effectiveness and controls health.
• Collect, process, preserve, analyze and present evidence in support of investigations.

Kenntnisse

SIEM expertise

SOAR playbooks

Python

AI/ML security

SPL/KQL

Detection engineering

Git workflows

Cross-domain security

Ausbildung

Bachelor's Degree in IT or related field

Tools

Sigma rules

MITRE ATT&CK

PyTorch

scikit-learn

Jobbeschreibung

Job Purpose: The Senior Cyber Security Specialist is responsible for designing, implementing and managing security technology solutions globally. Leads or serves as experienced technical resource in multi-discipline IT security projects intended to continually improve the security infrastructure and operating procedures. Keeps abreast of the latest technologies and identifies opportunities to leverage them to improve TD SYNNEX's cyber protection, detection and response capabilities. The responsibilities include reviewing our current security measures and processes in all geographies TD SYNNEX operates in, identifying and addressing areas of weakness through penetration testing and red teaming, and responding promptly to possible security breaches. Continuously improves core processes in identity & access management, threat hunting and analysis, vulnerability management, security monitoring and incident response both on-premise and in the cloud. Documents operating procedures and run books and trains the support team(s).

ABOUT THE TEAM

The Security Automation Engineering pod is the full-stack security engineering function of the future. It blends SIEM mastery, SOAR automation, detection craft, and AI/ML fluency into a single high-velocity pod - building, automating, and detecting across every layer of the security operations stack with intelligent systems as its force multiplier. Unlike other engineering pods where AI is an enhancement opportunity, this pod treats AI as a native, first-class capability woven into every workflow: these engineers don't just use AI tools - they build, tune, and govern them. The team supports a 25,000-employee enterprise.

POSITION SUMMARY

A full-stack security engineer who operates fluidly across SIEM administration, playbook development, detection rule creation, and AI system implementation. Owns a domain focus area while maintaining cross-functional capability across all disciplines.

KEY RESPONSIBILITIES

• Develop and deploy AI-powered detection rules using ML anomaly models, LLM-generated Sigma/SPL/KQL, and behavioral analytics.
• Build intelligent SOAR playbooks that leverage LLM reasoning for dynamic decision-making and adaptive response.
• Implement and tune AI-driven alert triage systems - automated scoring, enrichment, and routing based on ML classifiers.
• Manage SIEM platform components: index optimization, search performance, and data model maintenance.
• Design prompt engineering frameworks and evaluation harnesses for security-focused LLM applications.
• Build RAG (Retrieval-Augmented Generation) pipelines using internal security knowledge bases, runbooks, and threat intel.
• Conduct AI-augmented threat hunting - using LLMs to generate hypotheses and ML to identify anomalous patterns at scale.
• Develop and maintain CI/CD pipelines for detection rules, playbooks, and ML model deployments.

Responsibilities

• Technical design, implementation, enhancement and ongoing support for security technologies (30%)
• Executes and continually improves core security processes such as vulnerability management, threat analysis, security monitoring and incident response, identity and access management (10%)
• AppSec reviews, penetration testing and red teaming activities to identify gaps and weaknesses. Utilize red team learnings to improve detection capabilities and response automation (20%)
• Process automation, orchestration for improving team efficiency, documentation and training (20%)
• Data analytics and KPI reporting for ensuring operational effectiveness and controls health (10%)
• Collects, processes, preserves, analyzes, and presents computer-related evidence in support of breaches, vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations. (10%)

Knowledge, Skills and Experience

• Bachelor's Degree with IT field of study required.
• 8 to 10 Years of relevant work experience.
• 5+ years in security engineering with demonstrated cross-domain experience (SIEM + SOAR or SIEM + Detection).
• Proficiency in SIEM query languages (SPL, KQL) AND SOAR playbook development (Python, low-code platforms).
• Experience building or integrating AI/ML models for security use cases.
• Strong Python skills with familiarity in ML frameworks (scikit-learn, PyTorch) and LLM APIs.
• Detection engineering experience: Sigma rules, MITRE ATT&CK mapping, rule tuning methodology.
• Git-based workflow proficiency for detection-as-code and infrastructure-as-code.
• Other Education / Certifications: selection of security and technology certifications and/or equivalent proven work experience

Working Conditions

• Occasional non-standard work hours or overtime as business requires.
• On-call availability required as necessary.
• Some travel required.

At TD SYNNEX, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact.

What’s In It For You?

• Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle.
• Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses.
• Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program.
• Diversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.
• Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program.
• Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives.

At TD SYNNEX (NYSE: SNX), we’re proud to share an unwavering passion for bringing compelling technology products, services and solutions to the world. We’re an innovative partner that helps our customers maximize the value of IT investments, demonstrate business outcomes and unlock growth opportunities. With diverse backgrounds, expertise and experiences, our co-workers make us who we are. When we seek to understand one another and recognize the power of the individual, we demonstrate respect and dignity; we learn, evolve and unlock potential to achieve outstanding results for our customers and win together. This broad perspective is integral to our commitment to diversity, equity and inclusion.

To learn more, visit www.TDSYNNEX.com or follow us on Twitter, LinkedIn, and Facebook