Incident Response Director

GCS; Dubai; Hybrid; AED 550,000 - 950,000; Full time

Benefits offered by this job

Competitive salary

Benefits package

Job summary

GCS is seeking a Director of Incident Response in the UAE to lead a seasoned team supporting critical national infrastructure, government, and high-profile environments.

You will own cyber–Incident Management across client environments, coordinate specialist response teams, and translate technical findings into clear business risks for CISOs and senior stakeholders.

Qualifications

• Senior leadership experience across Incident Management and cyber defence.
• Proven track record building and mentoring a cyber response team.
• Experience managing multiple complex incidents from escalation through containment, recovery, and review.
• Strong understanding of SOC operations and the incident response lifecycle.

Responsibilities

• Lead incident response across multiple client environments.
• Coordinate SOC, IR, DFIR, threat-hunting, and cloud security specialists.
• Governance, reporting and service delivery standards.
• Develop playbooks and improve team capabilities.

Skills

Incident Management

Incident Response

SOC

DFIR

Cyber Defence

Senior leadership

Stakeholder communication

Education

Cybersecurity certifications (GCIH, GCFA, GCIL, CISSP, CISM, CCSP, CREST CCIM)

Tools

SIEM

EDR

XDR

Cloud IR

Job description

Incident Response Director | UAE | Permanent |

We’re hiring a Director of Incident Response to lead an established team supporting critical national infrastructure, government, and other high-profile environments.

You will own cyber–Incident Management across multiple client environments, coordinate specialist response teams, and translate technical findings into clear business risks and recommendations for CISOs and senior stakeholders.

The Essentials

• Senior leadership experience across Incident Management, Incident Response, SOC, DFIR, or Cyber Defence
• Proven experience managing and developing a cyber response team
• Experience managing multiple complex cyber incidents from escalation through containment, recovery, and review
• Strong understanding of SOC operations and the full incident response lifecycle
• Knowledge of SIEM, EDR, XDR, and cloud incident response
• Confidence advising CISOs, clients, and senior stakeholders
• Relevant certifications such as GCIH, GCFA, GCIL, CISSP, CISM, CCSP, CREST CCIM, or equivalent

What You’ll Do

• Lead the Incident Response function across multiple client environments
• Manage incident priorities, critical escalations, and response outcomes
• Coordinate SOC, IR, DFIR, threat-hunting, and cloud security specialists
• Maintain high standards across incident governance, reporting, and service delivery
• Improve response processes, playbooks, and team capability

Nice to Have

• Experience responding to incidents involving AI systems, GenAI applications, or LLM-enabled platforms
• Understanding of AI security risks, including prompt injection, data leakage, model misuse, and compromised AI agents
• Familiarity with OWASP guidance for LLM applications or MITRE ATLAS
• Experience within critical national infrastructure, government, consulting, or a client-facing cybersecurity environment

Details:

• United Arab Emirates
• Permanent, full-time, On-site / hybrid
• Start date: January 2027
• Competitive basic salary plus benefits

If you have led a cyber–Incident Management function and advised senior stakeholders through complex incidents, we’d like to hear from you.