About the Role
As a Senior Incident Responder in the Incident Response & Forensics Team, you will be involved in a high-impact and operationally critical cyber defense environment. You will leverage your technical expertise in digital forensics and cyber incident response, while embodying the integrity and passion essential for success in cyber security and technology. This role offers opportunities to collaborate within a highly motivated and skilled team, as well as the ability to work independently on various engagements and scenarios. You thrive in a fast-paced, dynamic working environment, and you possess a humble and positive attitude, always ready to assist your team members.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Serve as the technical lead on active incident response engagements, leveraging 3-5 years of experience in various related fields.
- Convey investigation progress to clients using strong English communication and stakeholder management skills.
- Execute threat hunting activities to support incident response engagements and SOC functions.
- Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.
- Execute digital forensic investigations that support cyber incident response engagements.
- Contribute to process documentation and continuous service improvement initiatives.
- Produce detailed reports and technical briefs, effectively communicating tasks, methodologies, and guidance to customers.
- Simplify and explain technical findings for both technical and non-technical stakeholders.
- Demonstrate industry thought leadership through internal knowledge-sharing sessions.
- Conduct research activities to enhance service improvement tasks and better understand the threat landscape.
- Assist in maintaining the client-fostered DFIR Forensics Lab.
- Serve as the team’s subject matter expert in at least one vertical: host forensics, network forensics, mobile forensics, malware analysis, OT/ICS Incident Response, cloud forensics, or threat hunting.
- Adapt to a flexible schedule open to changing situations and opportunities.
- Maintain a team player mentality with a willingness to go the extra mile.
Technical Skills
- Strong understanding of blue team operations, incident response management, and digital forensics techniques.
- Knowledge of network protocols (TCP/IP) and an understanding of Microsoft Windows, Linux, and OSX environments.
- Proficient forensic skills across multiple operating systems.
- Familiarity with network analysis tools such as Bro/Zeek, Rita, or Suricata.
- Capability to analyze logs from system and network devices.
- Understanding of modern mobile operating systems and their security implications.
- Ability to conduct both static and dynamic malware analysis.
- A comprehensive understanding of enterprise systems, technologies, and infrastructure.
- Knowledge of targeted attacks and the ability to formulate customized remediation plans for compromised organizations.
- Up-to-date knowledge of current threats, vulnerabilities, and attack trends.
- Familiar with the ATT&CK framework and AI security processes, leveraging AI effectively within IR investigations.
- Excellent organizational skills, with the ability to prioritize work and operate independently.
- Quick learner with the ability to apply new knowledge effectively in day-to-day tasks.
Qualifications
- Attention to detail and reporting accuracy.
- Strong stakeholder management and communication skills, with excellent proficiency in English (spoken and written).
- GIAC certification in at least one discipline (e.g., GNFA, GCIH, GCIA, GCFE, GCFA, GDAT) or equivalent certification (e.g., eLearnSecurity).
- Previous experience in digital forensics is a must.
- A Bachelor’s degree in Computer Science or Engineering is desirable but not mandatory.
