Digital Forensic and Incident Response Specialist

Help AG, an e& enterprise company, is seeking a talented and enthusiastic Digital Forensic and Incident Response Specialist for its Cyber Defense Department. This position suits individuals with strong knowledge and interest in incident response and digital forensics. The successful candidate will lead the Digital Forensics and Incident Response (DFIR) team, conducting both off-site and on-site incident response activities and customer engagements. The specialist will leverage multiple security technologies, guiding customers through security incidents and employing best-practice digital forensic methods to detect, validate, and mitigate IT security-related incidents.

Responsibilities:

• Lead and mentor the DFIR team, managing daily tasks.
• Coordinate incident response activities in unknown environments, including triage, containment, eradication, and remediation.
• Conduct in-depth forensic investigations to determine the root causes of security incidents and breaches.
• Develop and maintain incident response plans, best practices, and procedures.
• Collaborate with cross-functional teams to ensure a coordinated response to security incidents.
• Analyze logs/data from various security technologies such as firewalls, IDS/IPS, and antiviruses.
• Perform forensic analysis of artifacts including RAM, packet captures, logs, and disk images.
• Develop incident response tools, scripts, and detection content.
• Stay updated on industry trends and emerging threats.

Qualifications & Skills:

• A degree in Computer Science, Information Systems, Electrical Engineering, or a closely related field.
• Strong knowledge of IT security best practices and common attack types.
• 3+ years of experience in information security, including incident handling and malware analysis.
• Strong background in areas such as Security Threat and Event Analysis, Malware Analysis, and Forensics across various platforms.
• Experience with the SANS Incident Response method (or similar) and handling complex incidents.
• Familiarity with languages such as Python, PowerShell, and Bash, and deep TCP/IP knowledge.

Language Requirements: Not specified.

Benefits:

• Health insurance with one of the leading global providers.
• Career progression and growth opportunities.
• Employee engagement activities throughout the year.
• Tailored training and development program.

About Us: Help AG is the cybersecurity arm of e& enterprise, providing tailored information security solutions across the Middle East. Established in 2004 and acquired by Etisalat in 2020, Help AG remains an independent IT security advisor focused on strengthening cyber defenses for enterprise businesses. With a vendor-agnostic approach and expertly qualified teams, Help AG delivers unmatched value to its customers.