Cyber Security Engineer (Remote)

Who we are

Kestreldale Security runs a 24/7 security operations centre that monitors endpoints, firewalls and cloud accounts for mid-sized companies. Identity and access management projects, mostly Okta and Entra ID rollouts, have been part of the business since 2006. Training budget covers one SANS course or equivalent per year.

The role

We're looking for a Cyber Security Engineer (Remote) to join our team. This is a remote role. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Our team is spread across 9 countries. Headquarters is in Riyadh. This is a full-time remote role. We use an employer of record in Pakistan, so you get a proper employment contract, not a freelance agreement. You will work Dubai business hours, Monday to Friday.

What you'll do

• Automate security checks in CI/CD pipelines
• Write secure coding guidelines and run developer training
• Triage bug bounty reports from HackerOne or Bugcrowd
• Respond to security incidents and lead the technical investigation
• Run threat modelling sessions with engineering teams on new features and architecture changes

What we're looking for

• Good judgment on risk: knowing what to fix now and what can wait
• Ability to explain security issues to engineers without lecturing them
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Benefits

PKR 240,000 - PKR 320,000 pcm

• Annual learning budget
• Public holidays observed per your country
• Paid parental leave
• Annual salary review
• Annual team retreat
• 20 days paid time off

Candidates must be eligible to work in Pakistan.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kestreldale Security LLC.