Junior Cybersecurity Engineer
AmagisTech, Milan +1
What you will do
You are the architect of scale. Every rule you write and every playbook you automate multiplies the impact of the entire SOC.
- Detection Engineering: Design, test, and tune detection rules (KQL, SPL, correlation logic) that catch real threats and kill false positives before they ever reach an analyst.
- Automation & SOAR: If a task is repetitive, you automate it. You build and maintain SOAR playbooks that enrich alerts, isolate hosts, and orchestrate response without waiting for a human.
- Integration & Tooling: You connect the stack. APIs, log sources, threat intel feeds, custom scripts — you make the tools talk to each other so nothing falls through the cracks.
- Continuous Improvement: You measure what you build. You track detection coverage against MITRE ATT&CK, close the gaps, and make the whole system smarter release after release.