Lead Consultant – Incident Response

Forensic Focus Limited; Abu Dhabi; On-site; AED 300,000 - 520,000; Full time

Job summary

Forensic Focus Limited is seeking an experienced Incident Responder to lead active engagements and support IR retainer clients. You will perform host-based and network forensics across Windows, Mac, and Linux, conduct threat hunting, and provide reports to strengthen client defenses.

The role emphasizes clear communication of technical findings to both technical and non-technical audiences, with opportunities to contribute to thought leadership through writing and sessions.

Qualifications

• Experience with host and network-based forensics.
• Proven ability to analyse full packet data.
• Experience with EDR tooling and security monitoring.

Responsibilities

• Lead incident response engagements and support IR retainer clients.
• Conduct host-based and network forensics across Windows, Mac, Linux.
• Write reports and advise customers on defensive security posture.
• Perform threat hunting and EDR-driven assessments.

Skills

Blue team operations

EDR tooling

Host forensics

Network forensics

Threat hunting

Technical communication

Job description

The Role

This position leads active incident response engagements and supports IR retainer clients, conducting host-based and network forensic investigations across Windows, Mac, and Linux environments. Responsibilities include threat hunting, EDR-driven assessments, full packet analysis, report writing, and advising customers on strengthening their defensive security posture.

Skills & Experience

Candidates require strong blue team operations knowledge, experience with EDR tooling, and proficiency in host and network-based forensics. The ability to analyse full packet data, perform threat hunting, and communicate technical findings clearly to both technical and non-technical audiences is essential.

Who It Suits

This role suits an experienced incident responder who works well independently and within a collaborative team, thrives in fast-paced environments, and brings a humble, proactive attitude. Those who enjoy contributing to thought leadership through writing or knowledge-sharing sessions will find this role particularly rewarding.