DFIR Lead

Forensic Focus; Dubai; On-site; AED 420,000 - 640,000; Full time

Job summary

Forensic Focus is seeking an experienced DFIR leader to head a digital forensics and incident response team in Dubai. You will coordinate responses to security incidents, perform RAM/disk/log analysis, and reverse engineer malware to strengthen client defenses.

The role requires 10+ years in information security, a CS degree, and advanced certifications. Occasional travel may be required for incident engagements.

Qualifications

• Requires 10+ years in information security.
• Degree in Computer Science is required.
• Certifications preferred: CISSP, GCIA, GCIH, GCFA, GCFE, GREM and OSCP.

Responsibilities

• Leads a digital forensics and incident response team, coordinating responses to security incidents.
• Performs forensic analysis of RAM, disk images, packet captures and logs, and reverse engineers malware.
• Develops incident response plans, tools and detection content for diverse client environments.

Skills

Scripting

Malware analysis

Cloud security

Education

Bachelor's degree in Computer Science

CISSP

GCIA

GCIH

GCFA

GCFE

GREM

OSCP

Job description

The Role

Leads a digital forensics and incident response team, coordinating responses to security incidents, conducting forensic analysis of RAM, disk images, packet captures and logs, reverse engineering malware, and developing incident response plans, tools and detection content for diverse client environments.

Skills & Experience

Requires 10+ years in information security with several years in a senior or lead analyst capacity, degree in computer science, and certifications such as CISSP, GCIA, GCIH, GCFA, GCFE, GREM and OSCP. Scripting, malware analysis and cloud security knowledge are valued.

Who It Suits

Suits an experienced DFIR professional ready to lead and mentor a team, comfortable managing complex investigations, liaising across IT, legal and management, and willing to travel during incident response engagements.