Junior Cybersecurity Engineer

AmagisTech Limited; Milano; Hybrid; EUR 24,000 - 28,000; Full time

Benefits offered by this job

Hybrid work model

Paid internships (€1,000/month)

Office in Milan/Malta

Bonuses tied to detection goals

Job summary

AmagisTech Limited is seeking a junior Detection Engineer to join our cybersecurity team in Italy. You will design and tune detection rules, automate responses, and build integrations across SIEM, SOAR, and EDR tools. The role emphasizes learning and rapid growth within a modern security stack.

You will work with Python, log analysis, and MITRE ATT&CK alignment to protect real clients. A hybrid setup with a Milan office and strong internship pathways is offered.

Qualifications

• 0-1 years of experience in cybersecurity, IT, or software/scripting with an interest in security.
• Willingness to learn and automate repetitive tasks into code.
• Ability to write clean Python and read logs.

Responsibilities

• Design, test, and tune detection rules (KQL, SPL, correlation logic) to catch real threats and reduce false positives.
• Automate repetitive tasks and maintain SOAR playbooks for alert enrichment and automated responses.
• Create integrations by connecting APIs, log sources, and threat intel feeds so nothing falls through the cracks.
• Measure detection coverage against MITRE ATT&CK and continuously improve the security stack.

Skills

Python programming

MITRE ATT&CK familiarity

Cybersecurity basics

Log analysis

Scripting

Tools

SIEM

SOAR

EDR

Google SecOps

SentinelOne

Job description

Who we are

AmagisTech was founded to bring the best cybersecurity solutions, previously the domain of Big Tech, and make them accessible to SMEs.

Our mission: democratize digital security and make Italian companies resilient to threats, freeing them from the burden of obsolete and insecure IT.

AmagisTech is the platform that anticipates the future. If we succeed, we will become the default solution for securing business in Italy. This is a game-changing goal.

We are looking for people who want more than just a job: they want to build an exponential career. We are a strong team, and you will be on the front line. We are at the stage where a great idea becomes a global powerhouse.

Who We Are Looking For

We don't care who you have been, only who you want to become. We are not looking for people who copy-paste rules from a wiki; we are looking for Builders with the hunger to learn and the drive to automate everything that slows the team down.

You Are the Engine Behind the Defense : While the analysts hunt, you build the weapons they hunt with. You turn noise into signal, manual work into code, and good ideas into detections that fire at 3 AM so a human doesn't have to.

Modern Stack Obsessed : Forget legacy tools and clunky scripts. Here you will work hands-on with the most advanced SIEM, SOAR, and EDR technologies on the market (e.g., Google SecOps, SentinelOne). You will access exclusive resources to master detection engineering and security automation.

Your Mission

You are the architect of scale. Every rule you write and every playbook you automate multiplies the impact of the entire SOC.

• Detection Engineering: Design, test, and tune detection rules (KQL, SPL, correlation logic) that catch real threats and kill false positives before they ever reach an analyst.

• Automation & SOAR: If a task is repetitive, you automate it. You build and maintain SOAR playbooks that enrich alerts, isolate hosts, and orchestrate response without waiting for a human.

• Integration & Tooling: You connect the stack. APIs, log sources, threat intel feeds, custom scripts - you make the tools talk to each other so nothing falls through the cracks.

• Continuous Improvement: You measure what you build. You track detection coverage against MITRE ATT&CK, close the gaps, and make the whole system smarter release after release.

Who You Are

You have the ambition and the mindset to reject manual, repetitive defense.

• Hunger: 0-1 years of experience (or a strong internship/project background) in cybersecurity, IT, or software/scripting with a real interest in security. If you can write clean Python, read a log like an open book, and are curious about the MITRE ATT&CK framework, you are the right person.

• Want to Make History: We are in a phase of building and conquering. This is not a quiet "ticket factory" job. You will ship things that immediately protect real clients.

• Impact-Oriented: You don't just close a task. You ask why the process existed at all, and you automate it out of existence. Your success is measured by how much manual work you eliminate.

• Problem Solver, Not Reporter: You don't just say "the tool doesn't work." You dig into the API docs, find the root cause, and build the integration that fixes it for good.

What We Offer

More than just compensation - a ticket to specialized professional growth.

• Compensation: 24K-28K for the full-time role, with bonuses tied to detection and automation goals. We also open paid internships (€1,000/month) for high-potential talent ready to prove themselves and convert to a permanent role.

• Hybrid Model: Office in Milan / Malta (4 days) for intense collaboration with SOC and engineering leadership. Flexibility is balanced by team and customer needs.

• Accelerated Vertical Growth: You will witness a Tech Scale-up become an industry leader. You will have access to high-level training and certifications. Here, the learning curve is a straight line upwards.

• Explosive Environment: We work with extreme rigor, but we celebrate humility and team spirit. We hustle during an incident, we laugh about it after the post-mortem, and we secure the future together.

Selection Process: Technical Meritocracy

You must stand out. Technical potential and the drive to build are our currency.

• Phase 1: Screening Call (30 minutes).

• Phase 2: Written Technical Test (1 hour, asynchronous)

• Phase 3: Technical Interview with the SOC Lead (45 minutes) - Hands-on exercise. Show us how you build and how you think.

• Phase 4: Cultural & Strategic Fit Interview (30 minutes).