Senior DFIR Lead — Incident Response & Forensics

Help AG; Dubai; Hybrid; AED 500,000 - 800,000; Full time

Benefits offered by this job

Health insurance

Career progression and growth

Annual flights tickets

Flexible/Hybrid working environment

Open learning and development

Job summary

Help AG is looking for an experienced Incident Response and Forensic Investigation Lead in Dubai to head the DFIR team and drive on-site and off-site incident response engagements for clients. You will guide customers, apply digital forensic methods, and work with various security technologies to detect, validate and mitigate IT security incidents.

The role requires strong leadership, comprehensive DFIR expertise, memory/disk analysis, malware reverse engineering, and collaboration with

Qualifications

• Ten+ years in information security including security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis or threat detection.
• 2–3 years as a Senior or Lead Analyst, mentoring others on incident handling.

Responsibilities

• Lead and mentor the DFIR team and manage daily tasks.
• Coordinate incident response in unknown environments from triage to remediation.
• Conduct in-depth forensic investigations to determine root causes.
• Develop and maintain incident response plans, policies, and procedures.
• Collaborate with IT, legal, and management for coordinated response.
• Analyze logs from multiple security technologies and perform forensic analysis.

Skills

Incident Response

Digital Forensics

Leadership

SANS methodologies

Python/PowerShell

Malware Analysis

Networking (TCP/IP)

Malware Reverse Engineering

Education

Bachelor's degree in Computer Science or related field

Tools

Yara

Wireshark

Volatility

Splunk

Job description

Help AG is looking for an experienced Incident Response and Forensic Investigation Lead in Dubai to head the DFIR team and drive on-site and off-site incident response engagements for clients. You will guide customers, apply digital forensic methods, and work with various security technologies to detect, validate and mitigate IT security incidents.

The role requires strong leadership, comprehensive DFIR expertise, memory/disk analysis, malware reverse engineering, and collaboration with