Lead Incident Response & Forensics Specialist

Cpx Affiliate; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

Cpx Affiliate in Abu Dhabi is seeking a Lead Incident Responder to guide incident response and forensics within a high-impact cyber defence environment. You will lead engagements, coordinate with clients, and deliver detailed reports across Windows, Linux, and Mac ecosystems.

You will also mentor junior staff, develop remediation plans, and drive continuous service improvements while maintaining a proactive security posture in a dynamic team setting.

Qualifications

• Good attention to detail and reporting accuracy with strong stakeholder management and English skills.
• GIAC certification in at least one discipline (two desired): GNFA, GCIH, GCIA, GCFE, GCFA, GDAT, etc.
• Or equivalent (eLearnSecurity, etc).
• Previous experience performing digital forensics is a MUST.
• Previous experience performing malware analysis is desirable.
• Bachelor's degree in Computer Science or Engineering desirable, but not mandatory.

Responsibilities

• Serve as technical & coordination lead on active incident response engagements.
• English communication skills and stakeholder management are a MUST to coordinate staff and report progress to clients.
• Execute and coordinate threat hunting activities in support of IR engagements and SOC activities.
• Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.
• Execute digital forensic investigations supporting cyber incident response engagements.
• Contribute to process documentation and continuous service improvement activities.
• Lead the production of detailed reports and technical briefs for customers.
• Perform QA on reports created by junior team members.
• Explain technical findings to technical and non-technical staff in an accessible way.
• Demonstrate thought leadership via internal brown-bag sessions.
• Lead team research activities for service improvement tasks.
• Help maintain the DFIR Forensics Lab.
• Be SME on at least two verticals: host forensics, network forensics, mobile forensics, malware analysis, OT/ICS IR, cloud forensics, threat hunting.

Skills

Blue team operations

Threat hunting

Stakeholder management

Education

GIAC GNFA/GCIH/GCIA/GCFE/GCFA

eLearnSecurity certifications

Bachelor's degree in Computer Science or Engineering (desirable)

Tools

Bro/Zeek

Rita

Suricata

Job description

Cpx Affiliate in Abu Dhabi is seeking a Lead Incident Responder to guide incident response and forensics within a high-impact cyber defence environment. You will lead engagements, coordinate with clients, and deliver detailed reports across Windows, Linux, and Mac ecosystems.

You will also mentor junior staff, develop remediation plans, and drive continuous service improvements while maintaining a proactive security posture in a dynamic team setting.