Specialist, Cybersecurity Defense

About
The Incident Response Specialist role is responsible for identifying, containing, eradicating, and recovering from cybersecurity incidents to minimize their impact on ROSHN’s operations, assets, and reputation. It also involves conducting digital forensics investigations to analyze and preserve digital evidence related to these incidents, ensuring integrity and supporting legal, compliance, and organizational decision-making.

Responsibilities

• Perform the necessary steps once receiving an alert to validate and triage an incident
• Perform the necessary incident handling steps (contain, eradicate, and recover from an incident)
• Close, report, and provide recommendations and root cause analysis related to the incident
• Conduct tabletop exercises to ensure the incident response aligns with the plan and objectives
• Gather digital evidence and artifacts related to the incident
• Analyze the collected evidence, perform signature analysis, and conduct compromise assessments to identify indicators of compromise (IoCs) and potential threats
• Report findings, providing recommendations and root cause analysis related to the incident

Requirements

• A bachelor’s degree in computer science, Information Technology, Software Engineering, Cybersecurity, or a closely related field
• 3–5 years of experience in cybersecurity architecture, preferably across multi-platform environments
• Familiarity with frameworks like OWASP, NIST, MITRE ATT&CK, and NCA ECC practices
• Excellent communication and stakeholder management skills
• Preferred Professional Certificates: CompTIA Security+ / CySA+, GSEC, GSDA, GCTI, GMON, GREM

Location
Saudi Arabia