Information Security Engineer, Infrastructure Security

Kestreldale Security runs a 24/7 security operations center that monitors endpoints, firewalls and cloud accounts for mid-sized companies. Identity and access management projects, mostly Okta and Entra ID rollouts, have been part of the business since 2006. Training budget covers one SANS course or equivalent per year.

About the role

The previous person in this role moved to another team. The Security Engineering team is small and hands-on. We need someone who writes code and automation, not just policy. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. You will work Dubai business hours, Monday to Friday.

Duties

• Respond to security incidents and lead the technical investigation
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Assess third-party vendors and SaaS integrations for security risk
• Write secure coding guidelines and run developer training
• Own secrets management, key rotation and KMS policies
• Triage bug bounty reports from HackerOne or Bugcrowd
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

Requirements

• 3+ years in security engineering, application security or a related engineering role
• Programming or scripting ability in Python, Go or similar
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Preferred

• Malware analysis or digital forensics background
• Contributions to security tools or published CVEs
• Running a bug bounty program

What we offer

The salary range for this role is $132,000-$161,000/year. This range reflects base salary only.

• Company laptop
• Long-term engagement

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kestreldale Security LLC.