About the job

Food services serve about 30,000 meals a day. Chiselline is a public school district with more than 40,000 students and 20,100 employees. Coaching and club stipends are paid on top of salary.

Overview

This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Chiselline is hiring for the SOC Analyst role to monitor, investigate and respond to security alerts across our environment. Our headquarters is in Leeds, and about a third of the team works remotely from other countries. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. Working hours overlap with UK business hours. We talk mostly in Slack and hop on quick calls when something needs discussing.

Your responsibilities

Document incidents with timeline, impact and root cause
Help with user access reviews and offboarding audits
Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
Tune noisy detection rules with the security engineering team
Check threat intelligence feeds and IOCs against our environment
Hand off open cases at shift change with clear notes
Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
Analyse reported phishing emails, check headers and URLs, and purge malicious messages

Required qualifications

3+ years in an SOC, security analyst or IT security role
Familiarity with the MITRE ATT&CK framework
Working knowledge of SIEM and EDR tools
CompTIA Security+ or equivalent (or ability to obtain within six months)
Experience reading Windows Event Logs, Sysmon and Linux logs

Preferred

Malware analysis in a sandbox
CySA+, GCIH, GCIA or BTL1 certification
SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines
Prior help desk or network administration experience

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

Salary: QAR 23,500 - QAR 29,000/month

Why work with us

Long-term engagement
Annual rate review
Monthly internet allowance
Monthly payments via wire transfer or Wise

Duration: 12 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Chiselline.