Junior Cybersecurity Engineer

Role Overview: Support the day-to-day operation of the company s security controls monitoring, vulnerability management, application security testing and audit evidence under the guidance of senior members of the security team, while building towards independent ownership of technical security topics. Key Responsibilities: Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives. Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections. Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed. Patch and configuration: track patch compliance and verify hardening baselines against agreed standards. Application security: run scans, triage results with developers and track remediation. Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis. Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks. Cloud security: monitor security posture and configuration alerts in Azure. Incident support: assist investigations, collect evidence and document timelines and actions taken. Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current. Documentation: maintain procedures, asset and control records, runbooks and technical documentation. Awareness: help deliver phishing simulations and security awareness material and handle user queries. Reporting: prepare recurring security metrics and dashboards for the security team.

Desired Candidate Profile

Qualifications and Experience: Degree in Computer Science, Information Security, Engineering or a related field, or equivalent training. 0 3 years of experience in IT or cybersecurity (internships, apprenticeships, SOC or helpdesk experience count). Understanding of cybersecurity fundamentals: CIA triad, common attack types, risk, defense in depth. Working knowledge of networking (TCP/IP, DNS, VPN, firewalls) and operating systems (Windows and Linux). Awareness of application security basics, including the OWASP Top 10. Exposure to SIEM, EDR and vulnerability scanning tools. Familiarity with at least one cloud platform (Azure) and with Microsoft 365 security tooling. Basic scripting ability (PowerShell, Python or Bash) for reporting and simple automation. Awareness of security frameworks such as ISO 27001, NIST CSF or CIS Controls. Preferred certifications: CompTIA Security+, Microsoft SC-200, Fortinet NSE 1 3, AZ-500, CEH or equivalent. Good English, clear written documentation and a collaborative, service-oriented attitude.