Senior DFIR Lead — Incident Response & Forensics (Hybrid)

Help AG; Dubai; On-site; AED 420,000 - 680,000; Full time

Benefits offered by this job

Health insurance

Career progression and growth

Learning and development opportunities

Annual flights tickets

Flexible/Hybrid working environment

Open door policy

Job summary

Help AG in Dubai leads incident response and digital forensics for complex security incidents. You will guide a DFIR team, conduct on-site and off-site engagements, and develop custom response playbooks and detection content.

The role requires extensive senior DFIR experience, strong leadership, and hands-on forensic skills with a focus on real-world incident handling and cross-functional collaboration.

Qualifications

• Degree in CS, Information Systems, Electrical Engineering or related field.
• 10+ years in information security including operations, intrusion detection, incident analysis or malware analysis.
• 2–3 years as a Senior/ Lead Analyst guiding and mentoring other analysts.
• Certifications: CISSP, GCIA, GCIH, GCFA, GCFE, GREM, OSCP.
• Strong background in Threat Analysis, Network Security, Forensics and Penetration Testing.

Responsibilities

• Lead and mentor the DFIR team and manage daily tasks.
• Coordinate incident response activities in unknown environments: triage, containment, eradication, remediation.
• Conduct in-depth forensic investigations to determine root causes of incidents.
• Develop and maintain incident response plans, playbooks, and best practices.
• Collaborate with IT, legal and management for coordinated incident responses.
• Analyze logs from diverse security technologies to detect threats.

Skills

Leadership

Mentoring

Incident response

Forensics

Threat hunting

Python/PowerShell

Communication

Education

Degree in Computer Science / Information Systems / Electrical Engineering

Tools

Yara

Snort

Sigma rules

Digital Forensics tools

Job description

Help AG in Dubai leads incident response and digital forensics for complex security incidents. You will guide a DFIR team, conduct on-site and off-site engagements, and develop custom response playbooks and detection content.

The role requires extensive senior DFIR experience, strong leadership, and hands-on forensic skills with a focus on real-world incident handling and cross-functional collaboration.