Junior Security Engineer

Responsibilities

• Monitor and triage SOC alerts from SIEM, EDR, and email security platforms, investigating and escalating threats according to established runbooks and incident response procedures.
• Manage the day-to-day security ticket queue, ensuring timely resolution, accurate documentation, and clear stakeholder communication from open to close.
• Administer our email security platform, including policy configuration, quarantine management, phishing investigation, and ongoing tuning to reduce false positives while maintaining strong threat coverage.
• Operate and maintain EDR — monitoring detections, investigating endpoint alerts, managing agent deployment and updates, performing remediation actions, and tuning policies to minimize noise without reducing visibility.
• Perform basic log analysis and SIEM querying to identify anomalous or malicious activity, support incident investigations, and assist in onboarding new log sources.
• Support the vulnerability management program by reviewing and prioritizing CVE and scan findings based on risk and asset criticality, coordinating remediation with IT and engineering teams, and tracking patching progress.
• Research newly disclosed CVEs to assess organizational relevance and provide timely internal guidance on recommended action.
• Aid in the administration and tuning of additional security controls including firewalls, DLP, MFA, and network monitoring solutions.
• Contribute to the development and maintenance of security runbooks, standard operating procedures, and documentation.
• Support security projects including tool evaluations, policy development, and compliance initiatives such as SOC 2, ISO 27001, or NIST CSF.

Qualifications

• 1–2 years of experience in a security, IT, or systems administration role; relevant internships and co-ops are welcome.
• Foundational understanding of networking concepts including TCP/IP, DNS, HTTP/S, firewalls, and VPNs.
• Familiarity with Windows and Linux operating systems in an enterprise environment.
• Basic understanding of common attack techniques, threat actor TTPs, and the MITRE ATT&CK framework.
• Experience working within a ticketing system such as ServiceNow, Jira, or Zendesk.
• Strong analytical and problem-solving skills with high attention to detail.
• Clear written and verbal communication skills with the ability to document findings and escalate appropriately.
• Ability to manage competing priorities in a fast-paced, team-oriented environment.