Digital Forensics & Incident Response (DFIR) Resident Engineer

ITHR Technologies Consulting LLC; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading technology consulting firm in Abu Dhabi is seeking an experienced Digital Forensics & Incident Response (DFIR) Resident Engineer for a six-month engagement. The role involves supporting client operations, providing technical expertise with DFIR tools like Exterro FTK, and assisting in digital forensic investigations. Ideal candidates will have a Bachelor’s degree in a relevant field and 3-5 years of relevant experience.

Qualifications

• Proven hands-on experience managing, configuring, and using Exterro FTK for digital forensic investigations.
• Strong understanding of digital forensics principles, methodologies, and chain-of-custody procedures.
• Minimum 3-5 years of relevant experience in digital forensics and incident response.

Responsibilities

• Serve as the primary technical point of contact for the client’s DFIR toolset.
• Provide ongoing operational support for deployed DFIR solutions.
• Assist with digital forensic investigations and incident response activities.

Skills

Managing Exterro FTK

Digital forensics principles

Troubleshooting and analytical skills

Excellent communication

Ability to work independently

Education

Bachelor’s degree in Computer Science or related field

Tools

Exterro FTK

OpenText EnCase

Oxygen Forensic Detective

Passware Kit Forensic

ACE Lab PC-3000

Job description

ITHR Tech Job Description

Digital Forensics & Incident Response (DFIR) Resident Engineer

Location: Client Site (Abu Dhabi, UAE)

Company: ITHR Tech

Contract Duration: 6 Months (Initial)

Role Summary

We are seeking an experienced and dedicated Digital Forensics & Incident Response (DFIR) Resident Engineer to support a key client engagement for an initial six-month period. The successful candidate will be embedded within the client’s team, serving as the primary technical expert and focal point for their deployed DFIR solutions. This role requires strong hands‑on expertise particularly with Exterro FTK and the ability to ensure ongoing operational readiness of the DFIR environment.

Key Responsibilities

• Serve as the primary technical point of contact for the client’s DFIR toolset, with a strong focus on Exterro FTK.
• Provide ongoing operational support, maintenance, and troubleshooting for deployed DFIR solutions, including:
  • Exterro FTK
  • OpenText EnCase
  • Oxygen Forensic Detective
  • Passware Kit Forensic
  • ACE Lab PC‑3000
• Assist the client’s team with digital forensic investigations and incident response activities using the deployed tools.
• Ensure optimal configuration and effective functioning of all DFIR solutions.
• Develop and maintain documentation related to DFIR environment configurations, processes, and procedures.
• Provide knowledge transfer and informal training to client team members as needed.
• Liaise between the client and ITHR Tech for technical support, updates, and escalations.
• Stay current with the latest DFIR trends, techniques, and tool updates.

Required Qualifications & Skills

• Proven hands‑on experience managing, configuring, and using Exterro FTK for digital forensic investigations.
• Strong understanding of digital forensics principles, methodologies, and chain‑of‑custody procedures.
• Experience working in a DFIR or Security Operations Center (SOC) environment.
• Strong troubleshooting and analytical problem‑solving skills.
• Excellent communication and interpersonal abilities, with the capacity to serve as a trusted advisor to the client.
• Ability to work independently and manage tasks effectively in an on‑site environment.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent practical experience.

Desired Qualifications & Skills

• Exterro Certified Engineer (ECE) or Exterro Certified Examiner (ACE) certification (highly desirable).
• Hands‑on experience with one or more of the following tools:
  • OpenText EnCase Forensic
  • Oxygen Forensic Detective
  • Passware Kit Forensic
  • ACE Lab PC‑3000
• Experience working as a resident engineer or in a client‑facing technical support role.
• Familiarity with digital forensics lab setup and management.
• Additional relevant industry certifications (e.g., GCFE, GCFA, EnCE, CFCE).

Experience

Minimum 3‑5 years of relevant experience in digital forensics and incident response.