Junior Cybersecurity Engineer

Role Overview:

Support the day-to-day operation of the company’s security controls — monitoring, vulnerability management, application security testing and audit evidence — under the guidance of senior members of the security team, while building towards independent ownership of technical security topics.

Key Responsibilities:

• Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives.
• Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections.
• Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed.
• Patch and configuration: track patch compliance and verify hardening baselines against agreed standards.
• Application security: run scans, triage results with developers and track remediation.
• Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis.
• Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks.
• Cloud security: monitor security posture and configuration alerts in Azure.
• Incident support: assist investigations, collect evidence and document timelines and actions taken.
• Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current.
• Documentation: maintain procedures, asset and control records, runbooks and technical documentation.
• Awareness: help deliver phishing simulations and security awareness material and handle user queries.
• Reporting: prepare recurring security metrics and dashboards for the security team.