DFIR Lead: Incident Response & Digital Forensics

Salt; Dubai; On-site; AED 260,000 - 420,000; Full time

Job summary

Salt is seeking a seasoned DFIR Lead to manage and mentor the digital forensics and incident response team. You will lead incident response across diverse environments, perform in-depth forensic investigations, and develop robust response plans and playbooks for complex security incidents.

The role requires extensive experience in security operations, malware analysis, reverse engineering, and log analysis, with hands-on scripting in Python/PowerShell and familiarity with red team tactics.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Electrical Engineering, or closely related field.
• 10+ years information security experience including security operations, intrusion detection, incident analysis, log analysis, malware analysis, reverse engineering or threat detection.
• 2–3 years as Senior or Lead Analyst guiding and mentoring others.

Responsibilities

• Lead and mentor the DFIR team and daily management tasks.
• Coordinate incident response in unknown environments, including triage, containment, eradication, and remediation.
• Conduct in-depth forensic investigations to determine root causes of incidents.

Skills

Security operations

Incident handling

Forensics analysis

Threat hunting

SANS methodology

Python scripting

PowerShell scripting

TCP/IP knowledge

Red Team basics

Log analysis

Education

Bachelors in CS/IS/EE

Tools

Yara rules

Digital Forensics tools

Snort/Sigma rules

Job description

Salt is seeking a seasoned DFIR Lead to manage and mentor the digital forensics and incident response team. You will lead incident response across diverse environments, perform in-depth forensic investigations, and develop robust response plans and playbooks for complex security incidents.

The role requires extensive experience in security operations, malware analysis, reverse engineering, and log analysis, with hands-on scripting in Python/PowerShell and familiarity with red team tactics.