Security Engineer (Blue Team)

About The Role

We are seeking a motivated Blue Team Engineer to join our cybersecurity team. In this role, you will be responsible for expanding and maintaining the coverage of our Unified Endpoint Management (UEM) and Endpoint Detection & Response (EDR) solutions, analysing and validating security alerts, conducting threat intelligence analysis, and supporting the establishment and ongoing operation of our Security Operations Centre (SOC).

This is an excellent opportunity for an early-career professional who is passionate about defensive security and eager to grow within a hands-on operational role.

What You Will Do

• Manage the installation, setup, and maintenance of EDR and UEM agents throughout company endpoints to achieve complete operational coverage
• Triage, analyse, and validate alerts generated by EDR platforms, distinguishing true positives from false positives and escalating confirmed threats
• Conduct threat intelligence analysis — ingest IOCs and TTPs from threat feeds, assess relevance to the organisation, and translate findings into actionable detection rules
• Assist in establishing and managing the daily operations of the SOC, including the development of playbooks, processes, and escalation procedures
• Tune detection rules and alert thresholds to reduce noise and improve detection accuracy
• Participate in incident response activities, including containment, investigation, forensic and post-incident review
• Maintain documentation of security configurations, standard operating procedures, and coverage metrics
• Collaborate with IT and infrastructure teams to ensure endpoint compliance and security policy enforcement
• Coordinate the lifecycle of the bug bounty program, including report triage, formal documentation of validated vulnerabilities, and maintenance of audit logs for regulatory compliance

What Are We Looking For

• One year of relevant work experience in cybersecurity, IT operations, or a related field
• Bachelor's degree in Computer Science, Information Management, Information Security, or a related discipline
• Understanding of common attack techniques and frameworks (MITRE ATT&CK)
• Basic knowledge of endpoint hardening, network security fundamentals, and log analysis
• Strong analytical and problem-solving skills with attention to detail
• Relevant certifications (CompTIA Security+, CySA+, BTL1, or similar) is a plus
• Experience with EDR and UEM solutions (e.g., Crowdstrike, SentinelOne, JumpCloud, Jamf, etc.) is a plus
• Familiarity with threat intelligence platforms and IOC management is a plus
• Scripting skills (Python, PowerShell, or Bash) for automation of routine tasks is a plus