Junior Security Engineer

Overview

Location: UK (remote/hybrid, with up to one day per week in central London)

Stack:

• SIEM: Microsoft Sentinel, or similar
• EDR/XDR: Defender, SentinelOne, CrowdStrike or equivalent
• Cloud/Platform: Azure (strongly preferred)
• Exposure to Microsoft security stack is advantageous but not required

Join a dedicated customer team as part of the wider Cybanetix engineering and security function. This role is open to both early-career security professionals and platform-focused engineers with Azure or equivalent systems experience who want to move into security engineering.

You will support investigations, contribute to detection tuning, and develop hands-on engineering capability across modern SIEM, EDR, and cloud platforms.

• Work with the configuration of modern SIEM, EDR, and cloud-based security platforms.
• Assist with configuration reviews and platform optimisation tasks.
• Support onboarding of new log sources and telemetry improvements.
• Work with detections from design through deployment and maintenance.
• Contribute to documentation and repeatable engineering processes.

Responsibilities

• Assist with incident handling activities, documentation, and follow-up actions.
• Contribute to SIEM and EDR tuning to improve signal quality.
• Help identify detection gaps and suggest improvements.
• Write and refine SIEM queries for investigation and hunting support.
• Support proactive threat hunting initiatives under guidance from senior engineers.
• Work as part of a dedicated customer team supporting day-to-day security operations.
• Communicate clearly with internal teams and senior engineers.
• Participate in structured knowledge sharing and mentoring sessions.
• Support on-call escalation processes where appropriate.

What we’re looking for

Must have:

• Strong understanding of core IT systems and platforms (Windows Server, Azure, networking fundamentals).
• Experience working with cloud or infrastructure platforms, ideally Azure.
• Strong analytical thinking and willingness to learn.
• Clear written and verbal communication skills.
• Ability to understand how systems integrate and how telemetry is generated.

Nice to have:

• Understanding of endpoint and SIEM investigations.
• Familiarity with at least one SIEM and one EDR platform.
• Basic experience writing queries in a SIEM environment.
• Exposure to the Microsoft security ecosystem.
• Experience working in a SOC or security operations environment.
• Basic scripting knowledge (PowerShell or Python).

What this role gives you

• Structured progression into security engineering from either a SOC or platform background.
• Hands-on experience with modern SIEM, EDR, and Azure security tooling.
• Mentorship from senior engineers and architects.
• Exposure to real-world enterprise environments.