International Contract Bench, Incident Response (DFIR)

Jobgether SRL; United Arab Emirates; On-site; AED 180,000 - 240,000; Full time

Benefits offered by this job

Flexible contract

Live investigations

Cloud forensics

IR team collaboration

Threat exposure

Flexible workload

Job summary

Jobgether SRL is seeking an International Contract Bench, Incident Response professional based in the United Arab Emirates. You will join a team of forensic and IR specialists handling live investigations across Windows, macOS, Linux, cloud, and SaaS environments.

The role offers flexible contracting to fit your schedule while staying technically active. You will investigate high-impact incidents, apply current threat knowledge, and contribute to analyses of ransomware and advanced threats.

Qualifications

• Experience responding to cyber threat activity as IR consultant, SOC analyst, or similar role.
• Strong understanding of Windows, macOS, and Linux forensic artifacts.
• Experience with digital forensics, BEC investigations, and network analysis.
• Knowledge of cloud-native investigations across AWS, GCP, Azure or willingness to learn.

Responsibilities

• Perform incident response and digital forensic investigations involving active threat activity.
• Analyze live response data and artifacts to identify malicious activity and support investigations.
• Investigate Windows, macOS, and Linux environments using forensic techniques and tooling.
• Analyze BEC, account takeover, and other identity-related incidents.
• Conduct network analysis to identify suspicious activity and IOC.
• Support investigations across cloud-native environments including AWS, GCP, Azure, and SaaS.
• Apply threat intelligence to investigative work and evolving threats.
• Share investigative perspectives to strengthen IR practices.
• Take on IR assignments for several hours per week according to availability.

Skills

Incident Response

SOC Analyst

Digital Forensics

Cloud Investigations

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an International Contract Bench, Incident Response (DFIR) based in United Arab Emirates.

As a contract Incident Response professional, you’ll support high-impact digital investigations involving sophisticated cyber threats and real-world security incidents. You’ll join an experienced team of forensic and incident response specialists working across a broad and evolving digital landscape. The role offers the opportunity to investigate live response data, identify malicious activity, and contribute to cases ranging from ransomware to nation-state threats. You’ll apply deep technical expertise across endpoint, network, cloud, and SaaS environments. The flexible contract model is designed for experienced investigators who want to stay technically engaged without committing to a traditional full-time on-call schedule. Your work will expand the team’s capacity to deliver high-quality investigations while fitting around your existing professional and personal commitments.

Accountabilities

• Perform incident response and digital forensic investigations involving active threat activity and security breaches.
• Analyze live response data and forensic artifacts to identify malicious activity, determine attack methods, and support investigations.
• Investigate Windows, macOS, and Linux environments using appropriate forensic techniques and tooling.
• Analyze business email compromise (BEC), account takeover, and other identity-related incidents.
• Conduct network analysis to identify suspicious activity, attacker behavior, and relevant indicators of compromise.
• Support investigations across cloud-native environments, including AWS, GCP, Azure, and SaaS applications.
• Apply threat intelligence and current knowledge of adversary techniques to investigative work.
• Contribute high-quality analysis to cases involving threats such as ransomware and sophisticated or nation-state activity.
• Share investigative perspectives, technical expertise, and feedback that help strengthen and evolve the incident response practice.
• Take on incident response assignments for a minimum of several hours per week, according to your availability and the needs of active investigations.

Requirements

• Professional experience responding to cyber threat activity as an Incident Response consultant, SOC analyst, or in a closely related role.
• Strong understanding of Windows, macOS, and Linux fundamentals and their relevant forensic artifacts.
• Experience with digital forensics, business email compromise investigations, and network analysis.
• Existing knowledge of cloud-native investigations across AWS, GCP, and Azure, or a strong willingness and ability to develop expertise in these areas.
• Strong investigative mindset with a consistent focus on accuracy, evidence quality, and thorough analysis.
• Ability to distinguish legitimate user activity from threat actor behavior based on technical evidence and investigative context.
• Strong curiosity and interest in threat intelligence, emerging attack techniques, and evolving cyber threats.
• Ability to work independently while contributing effectively to an experienced incident response team.
• Willingness to bring your perspective and technical voice to help shape investigative practices.
• Availability of at least a few hours per week to support incident response work.
• Ability to balance contract incident response work with existing professional commitments, where permitted by your current employer.

Benefits

• Flexible contract-based engagement designed to accommodate existing professional and personal commitments.
• Opportunity to work on live incident response investigations without committing to a traditional full-time on-call schedule.
• Exposure to complex investigations involving ransomware, account compromise, cloud environments, and sophisticated threat activity.
• Opportunity to work alongside an experienced team of incident response and digital forensics professionals.
• Continued hands-on exposure to emerging threats, investigative techniques, and cloud-native forensics.
• Flexible workload that allows you to take on assignments according to your availability and the needs of active cases.

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.