Security Engineer (Blue Team)

About The Role

We are seeking a motivated Blue Team Engineer to join our cybersecurity this role you will be responsible for expanding and maintaining the coverage of our Unified Endpoint Management (UEM) and Endpoint Detection & Response (EDR) solutions analysing and validating security alerts conducting threat intelligence analysis and supporting the establishment and ongoing operation of our Security Operations Centre (SOC).

This is an excellent opportunity for an early-career professional who is passionate about defensive security and eager to grow within a hands-on operational role.

What You Will Do

• Manage the installation setup and maintenance of EDR and UEM agents throughout company endpoints to achieve complete operational coverage
• Triage analyse and validate alerts generated by EDR platforms distinguishing true positives from false positives and escalating confirmed threats
• Conduct threat intelligence analysis ingest IOCs and TTPs from threat feeds assess relevance to the organisation and translate findings into actionable detection rules
• Assist in establishing and managing the daily operations of the SOC including the development of playbooks processes and escalation procedures
• Tune detection rules and alert thresholds to reduce noise and improve detection accuracy
• Participate in incident response activities including containment investigation forensic and post-incident review
• Maintain documentation of security configurations standard operating procedures and coverage metrics
• Collaborate with IT and infrastructure teams to ensure endpoint compliance and security policy enforcement
• Coordinate the lifecycle of the bug bounty program including report triage formal documentation of validated vulnerabilities and maintenance of audit logs for regulatory compliance

What Are We Looking For

• One year of relevant work experience in cybersecurity IT operations or a related field
• Bachelors degree in Computer Science Information Management Information Security or a related discipline
• Understanding of common attack techniques and frameworks (MITRE ATT&CK)
• Basic knowledge of endpoint hardening network security fundamentals and log analysis
• Strong analytical and problem-solving skills with attention to detail
• Relevant certifications (CompTIA Security CySA BTL1 or similar) is a plus
• Experience with EDR and UEM solutions (e.g. Crowdstrike SentinelOne JumpCloud Jamf etc.) is a plus
• Familiarity with threat intelligence platforms and IOC management is a plus
• Scripting skills (Python PowerShell or Bash) for automation of routine tasks is a plus