About The Role

We are seeking a motivated Blue Team Engineer to join our cybersecurity team. In this role, you will be responsible for expanding and maintaining the coverage of our Unified Endpoint Management (UEM) and Endpoint Detection & Response (EDR) solutions, analysing and validating security alerts, conducting threat intelligence analysis, and supporting the establishment and ongoing operation of our Security Operations Centre (SOC).

This is an excellent opportunity for an early-career professional who is passionate about defensive security and eager to grow within a hands-on operational role.

What You Will Do

Manage the installation, setup, and maintenance of EDR and UEM agents throughout company endpoints to achieve complete operational coverage
Triage, analyse, and validate alerts generated by EDR platforms, distinguishing true positives from false positives and escalating confirmed threats
Conduct threat intelligence analysis — ingest IOCs and TTPs from threat feeds, assess relevance to the organisation, and translate findings into actionable detection rules
Assist in establishing and managing the daily operations of the SOC, including the development of playbooks, processes, and escalation procedures
Tune detection rules and alert thresholds to reduce noise and improve detection accuracy
Participate in incident response activities, including containment, investigation, forensic and post-incident review
Maintain documentation of security configurations, standard operating procedures, and coverage metrics
Collaborate with IT and infrastructure teams to ensure endpoint compliance and security policy enforcement
Coordinate the lifecycle of the bug bounty program, including report triage, formal documentation of validated vulnerabilities, and maintenance of audit logs for regulatory compliance

What Are We Looking For

One year of relevant work experience in cybersecurity, IT operations, or a related field
Bachelor's degree in Computer Science, Information Management, Information Security, or a related discipline
Understanding of common attack techniques and frameworks (MITRE ATT&CK)
Basic knowledge of endpoint hardening, network security fundamentals, and log analysis
Strong analytical and problem-solving skills with attention to detail
Relevant certifications (CompTIA Security+, CySA+, BTL1, or similar) is a plus
Experience with EDR and UEM solutions (e.g., Crowdstrike, SentinelOne, JumpCloud, Jamf, etc.) is a plus
Familiarity with threat intelligence platforms and IOC management is a plus
Scripting skills (Python, PowerShell, or Bash) for automation of routine tasks is a plus