Digital Forensics and Incident Response Consultant

DTS Solution; Dubai; On-site; AED 120,000 - 180,000; Full time

Job summary

A reputable company in Dubai is seeking a Digital Forensics and Incident Response Consultant to support their 800-HACKED program. The role involves cyber breach investigations, threat analysis, and providing expert forensic insights. Candidates must have over 6 years of experience, relevant certifications, and proficient knowledge of DFIR tools. This dynamic position requires strong analytical skills and the ability to effectively communicate findings in both written reports and courtroom settings.

Qualifications

• 6+ years of experience in network/security and analyzing digital evidence.
• Expert knowledge of DFIR tools and threat hunting methodologies.
• Certifications such as GCIA, GCIH, CISSP, and GCFE are required.

Responsibilities

• Conduct cyber breach investigations and perform malware analysis.
• Advise on potential malicious activities using threat intelligence.
• Prepare Incident Response Reports and ensure chain of custody in investigations.

Skills

Threat Hunting

Cybersecurity Analysis

Incident Response

Forensic Analysis

Education

GCIA

GCIH

CISSP

GCFE

Tools

Autopsy

Encase

FTK+

IDA Pro

Wireshark

tcpdump

Job description

Digital Forensics and Incident Response Consultant DTS Solution

• Work as a DFIR consultant in DTS Solution supporting our 800-HACKED program
  
• Work as a consultant for many Incident Retainer Program
  
• Cyber breach investigations including forensic and malware analysis. Identifies network computer intrusion evidence and perpetrators.
  
• Strong understanding on threat hunting methodologies.
  
• Strong experience in post-compromise assessment.
  
• Ability to perform detailed forensics investigations;
  
• Knowledge on DFIR tools Autospy, Encase, Access Data, FTK+, IDA etc.
  
• Examines and performs comprehensive technical analysis of computer-related evidence and information stored on a device(s) during the conduct of an investigation or litigation.
  
• Proactively advise teams/hunt for and research potential malicious activity and incidents across multiple platforms using advanced threat network and host-based tools.
  
• Use both internal and external threat intelligence to build indicators of compromise into monitoring tools, can integrate these tools with one another to provide data enrichment.
  
• Use strong TCP/IP networking skills to perform network analysis to isolate and diagnose potential threats and anomalous network behavior.
  
• Ensures chain of custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports.
  
• Report common and repeated problems (trend analysis) to management and propose process and technical improvements.
  
• Provide resolution plans for system and network issues.
  
• Provide support in the detection, response, mitigation, and reporting of real or potential cyber threats to the environment and assist in the automation of the processes.
  
• Provides oral and written communication to staff personnel concerning findings of fact, results of examination(s), and legal declarations, and testify in court as to the procedures and methodology used to recover and identify relevant evidence.
  
• Ability to write Incident Response Reports in accordance to international standards.
  

Qualifications

• 6+ years of experience of network/security and analyzing digital evidence and investigate computer security incidents
  
• Expert knowledge on DFIR tools such as Access Data, IDA Pro, FTK+, Encase
  
• Expert knowledge on threat hunting tools commercial and open source
  
• Familiarity with network tools such as Wireshark, tcpdump, libpcap.
  

Certifications

• GCIA, GCIH, or CISSP Certifications
  
• SANS Certified Forensic Examiner (GCFE)
  
• Industry Certification on Digital Forensics Tool
  

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]