Junior Security Engineer

Cybanetix; Greater London; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Hands-on experience with modern SIEM, EDR, and Azure security tooling

Structured progression into security engineering

Mentorship from senior engineers and architects

Job summary

A leading cybersecurity firm is seeking a dedicated security engineer who will support investigations, help tune detection systems, and work with cloud security platforms. This role is suitable for early-career security professionals or platform engineers looking to transition into security engineering. Ideal candidates will have a strong grasp of core IT systems, especially Azure, and clear communication skills. The position allows remote/hybrid work with opportunities for mentorship and career progression.

Qualifications

• Must have strong understanding of core IT systems and platforms.
• Experience working with Azure or equivalent infrastructure platforms.
• Ability to understand system integration and telemetry generation.

Responsibilities

• Assist with incident handling activities.
• Contribute to tuning SIEM and EDR to improve signal quality.
• Support proactive threat hunting initiatives.

Skills

Strong understanding of core IT systems and platforms (Windows Server, Azure, networking fundamentals)

Strong analytical thinking and willingness to learn

Clear written and verbal communication skills

Tools

Microsoft Sentinel

Defender

CrowdStrike

Azure

Job description

Overview

Location: UK (remote/hybrid, with up to one day per week in central London)

Stack:

• SIEM: Microsoft Sentinel, or similar
• EDR/XDR: Defender, SentinelOne, CrowdStrike or equivalent
• Cloud/Platform: Azure (strongly preferred)
• Exposure to Microsoft security stack is advantageous but not required

Join a dedicated customer team as part of the wider Cybanetix engineering and security function. This role is open to both early-career security professionals and platform-focused engineers with Azure or equivalent systems experience who want to move into security engineering.

You will support investigations, contribute to detection tuning, and develop hands-on engineering capability across modern SIEM, EDR, and cloud platforms.

• Work with the configuration of modern SIEM, EDR, and cloud-based security platforms.
• Assist with configuration reviews and platform optimisation tasks.
• Support onboarding of new log sources and telemetry improvements.
• Work with detections from design through deployment and maintenance.
• Contribute to documentation and repeatable engineering processes.

Responsibilities

• Assist with incident handling activities, documentation, and follow-up actions.
• Contribute to SIEM and EDR tuning to improve signal quality.
• Help identify detection gaps and suggest improvements.
• Write and refine SIEM queries for investigation and hunting support.
• Support proactive threat hunting initiatives under guidance from senior engineers.
• Work as part of a dedicated customer team supporting day-to-day security operations.
• Communicate clearly with internal teams and senior engineers.
• Participate in structured knowledge sharing and mentoring sessions.
• Support on-call escalation processes where appropriate.

What we’re looking for

Must have:

• Strong understanding of core IT systems and platforms (Windows Server, Azure, networking fundamentals).
• Experience working with cloud or infrastructure platforms, ideally Azure.
• Strong analytical thinking and willingness to learn.
• Clear written and verbal communication skills.
• Ability to understand how systems integrate and how telemetry is generated.

Nice to have:

• Understanding of endpoint and SIEM investigations.
• Familiarity with at least one SIEM and one EDR platform.
• Basic experience writing queries in a SIEM environment.
• Exposure to the Microsoft security ecosystem.
• Experience working in a SOC or security operations environment.
• Basic scripting knowledge (PowerShell or Python).

What this role gives you

• Structured progression into security engineering from either a SOC or platform background.
• Hands-on experience with modern SIEM, EDR, and Azure security tooling.
• Mentorship from senior engineers and architects.
• Exposure to real-world enterprise environments.