Senior DFIR Engineer — SOC & Cloud Forensics

Forensic Focus; Abu Dhabi; On-site; AED 350,000 - 550,000; Full time

Job summary

Forensic Focus in Abu Dhabi is seeking a Senior Expert Engineer to join our Security Operations Centre on-site. The role centers on end-to-end forensic investigations, incident response, and SOC operations in a high-pressure environment.

You will perform host-based and network forensics, malware triage, and threat hunting using MITRE ATT&CK, with cloud IR across AWS and Azure, producing high-quality reports for technical and non-technical stakeholders while meeting SLA requirements.

Qualifications

• 6+ years of DFIR experience with hands-on use of EnCase, FTK, Cellebrite, Oxygen, and Volatility.

Responsibilities

• Conduct end-to-end DFIR investigations and incident response.

Skills

DFIR

EnCase

FTK

Cellebrite

Volatility

SIEM

Sentinel

Splunk

KQL

Python

PowerShell

Docker

Kubernetes

Tools

Sentinel

Splunk

Docker

Kubernetes

Job description

Forensic Focus in Abu Dhabi is seeking a Senior Expert Engineer to join our Security Operations Centre on-site. The role centers on end-to-end forensic investigations, incident response, and SOC operations in a high-pressure environment.

You will perform host-based and network forensics, malware triage, and threat hunting using MITRE ATT&CK, with cloud IR across AWS and Azure, producing high-quality reports for technical and non-technical stakeholders while meeting SLA requirements.