Junior Cybersecurity Engineer

About the role

AmagisTech is looking for a motivated Junior Cybersecurity Engineer to join its fast‑growing security operations team. You will work directly with analysts, turning manual detection work into automated, code‑driven solutions that protect Italian SMEs from evolving threats.

Key responsibilities

• Design, test, and fine‑tune detection rules using KQL, SPL and correlation logic.
• Develop and maintain SOAR playbooks that enrich alerts, isolate hosts and orchestrate response actions.
• Integrate log sources, threat‑intel feeds and custom scripts via APIs to ensure seamless communication between security tools.
• Measure detection coverage against the MITRE ATT&CK framework and continuously improve coverage.
• Automate repetitive SOC tasks to increase efficiency and reduce false positives.

Required profile

• 0–1 years of experience or strong academic/project background in cybersecurity, IT or software scripting.
• Passion for automating security processes and a curiosity for modern threat‑detection techniques.
• Ability to read and interpret logs quickly and think like an attacker.

Required skills

• Python programming.
• KQL and SPL query languages.
• Experience with SIEM, SOAR and EDR platforms (e.g., Google SecOps, SentinelOne).
• API integration and scripting.
• Familiarity with the MITRE ATT&CK framework.