Junior Cybersecurity Engineer

Role Overview:
Support the day-to-day operation of the company’s security controls — monitoring, vulnerability management, application security testing and audit evidence — under the guidance of senior members of the security team, while building towards independent ownership of technical security topics.

Key Responsibilities:

• Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives.
• Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections.
• Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed.
• Patch and configuration: track patch compliance and verify hardening baselines against agreed standards.
• Application security: run scans, triage results with developers and track remediation.
• Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis.
• Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks.
• Cloud security: monitor security posture and configuration alerts in Azure.
• Incident support: assist investigations, collect evidence and document timelines and actions taken.
• Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current.
• Documentation: maintain procedures, asset and control records, runbooks and technical documentation.
• Awareness: help deliver phishing simulations and security awareness material and handle user queries.
• Reporting: prepare recurring security metrics and dashboards for the security team.

Qualifications and Experience:

• Degree in Computer Science, Information Security, Engineering or a related field, or equivalent training.
• 0–3 years of experience in IT or cybersecurity (internships, apprenticeships, SOC or helpdesk experience count).
• Understanding of cybersecurity fundamentals: CIA triad, common attack types, risk, defense in depth.
• Working knowledge of networking (TCP/IP, DNS, VPN, firewalls) and operating systems (Windows and Linux).
• Awareness of application security basics, including the OWASP Top 10.
• Exposure to SIEM, EDR and vulnerability scanning tools.
• Familiarity with at least one cloud platform (Azure) and with Microsoft 365 security tooling.
• Basic scripting ability (PowerShell, Python or Bash) for reporting and simple automation.
• Awareness of security frameworks such as ISO 27001, NIST CSF or CIS Controls.
• Preferred certifications: CompTIA Security+, Microsoft SC-200, Fortinet NSE 1–3, AZ-500, CEH or equivalent.
• Good English, clear written documentation and a collaborative, service-oriented attitude.

Soft skills:

• Excellent organizational skills (ability to prioritize, plan tasks, and respect deadlines).
• Good interpersonal skills.
• Teamwork skills/team spirit.
• Ability to work under stress and respond to tight deadlines.
• High level of autonomy/self-discipline.
• Proactiveness.
• Curious keen to learn and ready for new challenges.
• Ability to work independently.
• Strong willingness to learn and be coached.