Incident Response Consultant

Are you a dynamic cybersecurity professional with a passion for incident response and digital forensics? Do you thrive in high-pressure environments and bring a strategic mindset to tackling modern cyber threats? We are seeking an experienced Cyber Incident Response Consultant to join our growing team in Saudi Arabia.

Location: Riyadh, Saudi Arabia (On-site)
Work Conditions: Full-time, On-site, with flexibility to work non-traditional hours, including evenings, weekends, or holidays as required.

Key Responsibilities

• Respond to global cyber incidents stemming from both internal and external threats.
• Analyze and contain cyberattacks using knowledge of recent adversary tactics, techniques, and procedures.
• Conduct host-centric investigations using various forensic tools such as EDR, Volatility, X-Ways, and others.
• Utilize network forensic analysis techniques to interpret telemetry data and support incident investigations.
• Communicate the Incident Response Lifecycle and Cyber Kill Chain related to real-world adversary behavior.
• Translate technical findings into business impacts and present them to non-technical stakeholders.
• Lead and collaborate on the execution of incident response engagements.
• Contribute to Threat Hunting activities across client environments.
• Facilitate Table-Top Exercises and Incident Response Readiness Assessments.
• Develop client-facing documentation, executive reports, and technical summaries.
• Act as a liaison between internal security teams and client stakeholders.
• Drive process improvement initiatives to enhance consulting efficiency and scalability.
• Support public knowledge efforts through whitepapers, blogs, podcasts, and conference talks.

Required Skills & Experience

• Experience handling cybersecurity incidents and conducting digital investigations.
• In-depth knowledge of modern threats such as ransomware, cybercrime, hacktivism, and APTs.
• Strong foundation in forensic analysis, threat hunting, and incident response methodology.
• Ability to communicate complex information clearly to both technical and non-technical audiences.
• Flexibility to work on-call rotations as needed.

Preferred Qualifications

• Prior hands-on experience in cyber incident response or digital forensics.
• Industry-recognized certifications (CISSP, CISM, CISA, GCIH, GCFA, GCFE, GNFA, CFE).
• Familiarity with global cybersecurity frameworks and best practices.

Language Requirements: Eligible Applicants: EU or Jordan Nationals Only.