{"id":2486866,"url":"https://alion.io/job/syniverse-principal-cybersecurity-engineer","title":"Principal Cybersecurity Engineer","company":{"id":1900844,"name":"Syniverse","domain":"syniverse.com","url":"https://alion.io/company/syniverse","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Costa Rica"],"countries":["CR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":42000,"max_usd":109000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":588},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Splunk","optional":false},{"name":"Sysmon","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-09-30T00:00:00Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-15T01:25:27Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Syniverse is the world’s most connected company. Whether we’re developing the technology that enables intelligent cars to safely react to traffic changes or freeing travelers to explore by keeping their devices online wherever they go, we believe in leading the world forward.Which is why we work with some of the world’s most recognized brands. Eight of the top 10 banks. Four of the top 5 global technology companies. Over 900 communications providers. And how we’re able to provide our incredible talent with an innovative culture and great benefits.\nWho We're Looking For\nThis position is responsible for analyzing, developing, testing, and supporting security implementations. These security implementations must be developed and maintained with high-quality standards and minimal defects. This role will also act as a mentor and leader to other teammates and as a support for management.-\nSome of What You'll Do\nScope of the Role:\nDirect Reports: This is an individual contributor role with no direct reports. \nKey Responsibilities:\n· Own the security architecture, hardening, and risk remediation strategy for Syniverse’s Windows Server and Windows endpoint estate, including Active Directory, Group Policy, DNS, certificate services, and related infrastructure.\n· Design and maintain secure baseline configurations (CIS Benchmarks) for Windows systems, and drive compliance through configuration management tooling\n· Partner with the Counter Adversary Team to validate control effectiveness, and drive remediation of findings related to Windows, and data security.\n· Investigate and support the response to Windows and endpoint- related security incidents, including forensic triage, containment, and root- cause analysis, in coordination with the SOC and EDR platform (CrowdStrike Falcon Complete).\n· Develop automation (PowerShell, Python, or similar) to reduce manual security operations work - hardening checks, log onboarding, compliance evidence collection, and remediation workflows.\n· Design, deploy, and operate DLP controls across endpoints, email, and cloud channels to prevent unauthorized exfiltration of sensitive and regulated data (PII, customer data, intellectual property).\n· Implement and mature DSPM capabilities to discover, classify, and monitor sensitive data across on- premises Windows file systems, databases, and cloud repositories, and translate findings into risk- prioritized remediation plans.\n· Contribute Windows, Splunk, and data- security subject matter expertise to threat modeling, architecture reviews, and Security Risk Acceptance (SRA) evaluations for new and changing systems.\n· Mentor other security engineers on Windows security and Splunk engineering practices, and act as an escalation point for complex technical issues.\n· Maintain clear technical documentation and runbooks and communicate risk and remediation status effectively to both technical peers and non- technical stakeholders.\n· Build, tune, and maintain Splunk detections, correlation searches, dashboards, and lookups covering Windows security telemetry (event logs, Sysmon, EDR, Active Directory audit data), partnering with SOC and Detection Engineering to close coverage gaps.\n· Author and maintain Splunk SPL content - alerts, scheduled searches, and lookup- generating pipelines - to support threat detection, compliance reporting, and operational dashboards for the Windows and endpoint environment.\nRequired Qualifications:\n· Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.\n· 8+ years of progressive experience in information security or systems engineering, with at least 5 years focused specifically on Windows security engineering or Windows infrastructure hardening.\n· Deep expertise in Windows Server and Active Directory security: Group Policy, Kerberos/NTLM, PKI, and common attack paths (e.g., lateral movement, credential theft, Kerberoasting).\n· Proficient across the Microsoft security and cloud suite, including Entra ID (Azure AD), Microsoft Defender (Endpoint/XDR), Microsoft Purview (DLP/Information Protection), and Azure infrastructure and security services.\n· Hands- on proficiency with Splunk, including SPL query authoring, correlation searches, scheduled alerts/lookups, and dashboard or Dashboard Studio development.\n· Practical experience implementing or operating DLP solutions (e.g., Microsoft Purview DLP, Zscaler DLP/DSLPM or equivalent) across endpoint, network, and cloud channels.\n· Working knowledge of DSPM platforms and practices - data discovery, classification, and risk scoring across structured and unstructured data stores.\n· Experience with endpoint detection and response (EDR) platforms (e.g., CrowdStrike) and applying CIS Benchmarks to harden Windows systems.\n· Scripting/automation ability in PowerShell and at least one additional language (Python preferred).\n· Solid understanding of Zero Trust principles, identity- centric security architecture, and modern threat frameworks (MITRE ATT&CK).\n· Strong written and verbal communication skills, with the ability to translate technical risk into business terms for leadership and cross- functional partners.\nPreferred Qualifications:\n· Relevant certifications such as GCWN, CISSP, CRTP/CRTE, CompTIA Sec+ or Microsoft SC- 100/SC- 400.\n· Familiarity with hybrid identity (Azure AD/Entra ID) alongside on- premises Active Directory.\n· Exposure to threat modeling methodologies, coverage- matrix based risk assessment, or formal security risk acceptance processes.\n· Prior experience mentoring engineers or leading technical workstreams without formal people- management authority.\nAdditional Requirements:\n· Excellent oral and written communication skills\n· Excellent analytical and problem- solving skills\n· Constant improving mindset and ability to identify repetitive processes and automation opportunities\n· Innovative and creative when solving issues\n· Able to work in a fast- paced environment with little supervision\n· Basic knowledge of multiple security frameworks\n· Basic knowledge of security design and testing principles\n· Knowledge of log aggregation and event correlation strategies\n· Background in the telecommunications industry is a good- to- have\nWhat Success Looks Like:\nWindows attack surface (identity, endpoint, and infrastructure) is measurably reduced through hardening, patching discipline, and privileged- access controls.\nSplunk detection coverage for Windows and identity- based threats is comprehensive, well- tuned, and actionable for SOC.\nDLP and DSPM programs provide reliable visibility into where sensitive data lives and how it moves, with findings driving prioritized remediation.\nPeers and partner teams regard this role as the go- to technical authority on Windows security within the Cybersecurity organization.\n#LI-Hybrid\n-\nWhy You Should Join Us\nJoin us as we write a new chapter, guided by world-class leadership. Come be a part of an exciting and growing organization where we offer a competitive total compensation, flexible/remote work and with a leadership team committed to fostering an inclusive, collaborative, and transparent organizational culture.\nAt Syniverse connectedness is at the core of our business. We believe diversity, equity, and inclusion among our employees is crucial to our success as a global company as we seek to recruit, develop, and retain the most talented people who want to help us connect the world.\nKnow someone at Syniverse?\nBe sure to have them submit you as a referral prior to applying for this position.\nPay Transparency\nIn accordance with applicable pay transparency requirements, Syniverse will provide information regarding the salary range or compensation for this position during the recruitment process and prior to any compensation discussions.","description_format":"text","description_chars":7821,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Costa Rica","iso":"CR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Mobile Networks","Network Interconnect"],"lifecycle":[{"event":"open","at":"2026-10-14T00:45:57Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.843,"p_room":0.9,"age_days":14,"expected_fill_days":32,"reasons":["conf:0","win:mid"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/syniverse-principal-cybersecurity-engineer","json_url":"https://alion.io/job/syniverse-principal-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-15T02:59:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4433,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1900844},"rest":"https://alion.io/mcp/rest/get_company?id=1900844"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsyniverse-principal-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsyniverse-principal-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsyniverse-principal-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/syniverse-principal-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsyniverse-principal-cybersecurity-engineer"}]}