Incident Response & Digital Forensics Lead

Showcify; Abu Dhabi; On-site; AED 400,000 - 700,000; Full time

Job summary

Showcify is seeking a Senior Manager to lead the Incident Response & Forensics Team in a high‑impact cyber defence environment. You will own people management, coordinate DFIR lab activities, and act as the main escalation point for crisis management across one on‑site VIP client.

You will drive technical investigations, threat hunting, and reporting while mentoring the team to deliver rapid remediation and strategic improvements in a demanding security program.

Qualifications

• Minimum 10 years dedicated to IT security and/or security infrastructure.
• At least 6 years in a security role as part of an incident response team, including 4 years managing incident response teams or equivalent blue teams.
• Previous experience performing digital forensics is a MUST.
• Scripting skills (Shell, Python, PowerShell) are a plus.
• Bachelor’s / Master’s degree in computer science or information security desirable.

Responsibilities

• Take ownership and oversight of a team who executes all aspects of reactive and proactive defensive security projects, including a DFIR Lab, for a VIP customer.
• Serve as technical lead on active incident response engagements and coordinate crisis management.
• Lead threat hunting activities and proactive environment assessments and SOC tasks.
• Draft detailed reports and technical briefs for VIP stakeholders.
• Lead and mentor the team to develop talent and drive continuous service improvement.
• Coordinate host and network forensics across multiple platforms and investigations.

Skills

Blue team operations

Threat hunting

Digital forensics

Incident response leadership

People management

PICERL / NIST IR

Windows

Linux

Scripting (Shell, Python, PowerShell)

Education

Bachelor’s / Master’s in CS or Information Security

Tools

DFIR tools

Job description

Showcify is seeking a Senior Manager to lead the Incident Response & Forensics Team in a high‑impact cyber defence environment. You will own people management, coordinate DFIR lab activities, and act as the main escalation point for crisis management across one on‑site VIP client.

You will drive technical investigations, threat hunting, and reporting while mentoring the team to deliver rapid remediation and strategic improvements in a demanding security program.