IT Security Junior Engineer/Engineer

This position is responsible for supporting the organization’s security monitoring, incident response, and vulnerability management activities. The role will primarily focus on SOC operations using Wazuh, including monitoring security alerts, reviewing logs, validating incidents, escalating risks, and supporting response actions for issues such as unauthorized access, malware, phishing, suspicious activity, and possible data exposure. You will also support application and server vulnerability assessment activities, including reviewing web applications, APIs, mobile applications, Linux and Windows servers, validating scan results, preparing remediation guidance, and verifying fixes. Responsibilities: Monitor security events and alerts using Wazuh and other tools such as EDR, firewall, email security, cloud, endpoint, and network security platforms Analyze SIEM alerts, logs, agent data, vulnerability findings, file integrity monitoring events, authentication logs, and security events to identify suspicious activity, unauthorized access, malware, phishing attempts, data exposure, and policy violations Perform initial alert validation, severity assessment, false-positive review, and incident prioritization based on alert context, affected assets, risk level, and business impact Support incident containment and response actions such as blocking malicious indicators, disabling compromised accounts, isolating affected systems, removing malicious emails, revoking suspicious sessions, and validating remediation Track incidents from detection to closure and ensure timely follow-up on investigation, remediation, and preventive actions Perform application vulnerability assessments for web applications, APIs, and mobile applications using automated tools and manual verification where required Perform server vulnerability assessments on Linux and Windows servers to identify missing patches, insecure configurations, exposed services, weak protocols, and known vulnerabilities Review vulnerability scan results, validate findings, remove false positives, assign severity, and prepare clear remediation guidance for application and server teams Track vulnerability remediation status, follow up with owners, verify fixes through retesting, and maintain vulnerability assessment reports Support SIEM rule tuning, alert quality improvement, false-positive reduction, detection use-case creation, dashboard review, and security monitoring improvements Assess the security posture of third-party tools and services before adoption to identify risks and ensure compliance with organizational policies Research emerging security topics and new attack vectors to support continuous improvement of security monitoring and vulnerability assessment practices Manage assigned timelines, deadlines, and expectations, including coordination with internal teams and customer-facing stakeholders where required Technical Qualification: Experience in SIEM tools for security…