Role Overview:
Support the day-to-day operation of the company’s security controls — monitoring, vulnerability management, application security testing and audit evidence — under the guidance of senior members of the security team, while building towards independent ownership of technical security topics.
Key Responsibilities:
- Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives.
- Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections.
- Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed.
- Patch and configuration: track patch compliance and verify hardening baselines against agreed standards.
- Application security: run scans, triage results with developers and track remediation.
- Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis.
- Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks.
- Cloud security: monitor security posture and configuration alerts in Azure.
- Incident support: assist investigations, collect evidence and document timelines and actions taken.
- Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current.
- Documentation: maintain procedures, asset and control records, runbooks and technical documentation.
- Awareness: help deliver phishing simulations and security awareness material and handle user queries.
- Reporting: prepare recurring security metrics and dashboards for the security team.
Qualifications and Experience:
- Degree in Computer Science, Information Security, Engineering or a related field, or equivalent training.
- 0–3 years of experience in IT or cybersecurity (internships, apprenticeships, SOC or helpdesk experience count).
- Understanding of cybersecurity fundamentals: CIA triad, common attack types, risk, defense in depth.
- Working knowledge of networking (TCP/IP, DNS, VPN, firewalls) and operating systems (Windows and Linux).
- Awareness of application security basics, including the OWASP Top 10.
- Exposure to SIEM, EDR and vulnerability scanning tools.
- Familiarity with at least one cloud platform (Azure) and with Microsoft 365 security tooling.
- Basic scripting ability (PowerShell, Python or Bash) for reporting and simple automation.
- Awareness of security frameworks such as ISO 27001, NIST CSF or CIS Controls.
- Preferred certifications: CompTIA Security+, Microsoft SC-200, Fortinet NSE 1–3, AZ-500, CEH or equivalent.
- Good English, clear written documentation and a collaborative, service-oriented attitude.
Soft skills:
- Excellent organizational skills (ability to prioritize, plan tasks, and respect deadlines).
- Good interpersonal skills.
- Teamwork skills/team spirit.
- Ability to work under stress and respond to tight deadlines.
- High level of autonomy/self-discipline.
- Proactiveness.
- Curious keen to learn and ready for new challenges.
- Ability to work independently.
- Strong willingness to learn and be coached.