Information Security Analyst

About us

Kestreldale Security runs a 24/7 security operations centre that monitors endpoints, firewalls and cloud accounts for mid-sized companies. Identity and access management projects, mostly Okta and Entra ID rollouts, have been part of the business since 2006. Training budget covers one SANS course or equivalent per year.

The role

Kestreldale Security has an opening for an Information Security Analyst. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Contract role, full-time hours, paid in USD at the end of each month. Working hours follow Gulf time, Monday to Friday.

Day to day

• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Check threat intelligence feeds and IOCs against our environment.
• Escalate confirmed incidents and follow the incident response plan.
• Tune noisy detection rules with the security engineering team.
• Help with user access reviews and offboarding audits.
• Document incidents with timeline, impact and root cause.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.

What we're looking for

• 2+ years in an SOC, security analyst or IT security role.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Experience reading Windows Event Logs, Sysmon and Linux logs.

Pluses

• KQL or SPL query writing.

Compensation and benefits

Compensation: $6.00 - $7.00 per hour

• Paid time off.
• Flexible hours.
• Monthly payments via wire transfer or Wise.

This posting may close early if we receive enough applications.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kestreldale Security LLC.