Remote Incident Response & Forensics Consultant

Google; Dubai; Hybrid; AED 300,000 - 540,000; Full time

Job summary

Google—as part of Google Cloud and Mandiant—seeks an Incident Response Consultant in the UAE to lead client-facing engagements, perform forensic investigations, threat hunting, and malware triage across cloud and on-premises environments.

Responsibilities include documenting findings, developing remediation plans, and presenting findings to technical and executive audiences while traveling up to 30% as needed.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• 3 years of experience working on end-to-end incident response investigations, analysis, or containment actions.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead large, client-facing incident response engagements, examine cloud, end-point, and network-based sources of evidence.
• Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
• Build scripts, tools, or methodologies to enhance incident investigation processes.
• Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Skills

Incident response

Network forensics

Malware triage

Cloud forensics

Disk and memory forensics

End-to-end incident response

Travel up to 30%

Education

Bachelor's degree in Computer Science or related field

Job description

Google—as part of Google Cloud and Mandiant—seeks an Incident Response Consultant in the UAE to lead client-facing engagements, perform forensic investigations, threat hunting, and malware triage across cloud and on-premises environments.

Responsibilities include documenting findings, developing remediation plans, and presenting findings to technical and executive audiences while traveling up to 30% as needed.