Senior Incident Commander - IR & Digital Forensics

CPX; Abu Dhabi Emirate; On-site; AED 700,000 - 1,200,000; Full time

Job summary

CPX seeks a senior, commercially minded Incident Response (IR) and Digital Forensics (DFIR) leader to protect government, critical infrastructure and enterprise clients in the UAE. The Director will act as CPX Incident Commander for major cyber incidents, guiding crisis response and shaping an intelligence‑led, AI‑enabled incident response service.

The role combines hands-on technical credibility with executive-reporting duties, business development and operational leadership to expand the IR

Qualifications

• 12–15+ years in cybersecurity with DFIR/major incident experience.
• 5+ years leading teams or practices.
• Incident Commander experience during major incidents.
• Expertise in enterprise, cloud, endpoint, network and identity investigations.
• Experience building or scaling a cyber services business.
• Strong judgement under pressure; executive communication.
• Bachelor’s degree in cybersecurity or related field; or equivalent.
• Experience with government, critical infrastructure or OT/ICS response.
• MSSP/consulting/CERT leadership; partner ecosystem.
• Cloud forensics, threat hunting, malware reverse engineering, AI-assisted SOC.

Responsibilities

• Serve as CPX Incident Commander for major cyber incidents.
• Lead multidisciplinary teams across DFIR, SOC, Threat Intelligence and legal.
• Direct investigations, containment, eradication and recovery planning.
• Brief executives and authorities with situation reports and risk assessments.
• Coordinate OT actions with client approval and operational constraints.
• Own IR/DFIR strategy, operating model and readiness.
• Develop playbooks, KPIs and partnerships; improve detections and response.
• Translate findings into client resilience and intelligence products.

Skills

Incident Response

DFIR

Crisis Leadership

Executive Communication

Client Engagement

Cybersecurity Strategy

Business Development

Education

Bachelor’s degree in cybersecurity

Tools

Cloud forensics

Threat Hunting

Job description

CPX seeks a senior, commercially minded Incident Response (IR) and Digital Forensics (DFIR) leader to protect government, critical infrastructure and enterprise clients in the UAE. The Director will act as CPX Incident Commander for major cyber incidents, guiding crisis response and shaping an intelligence‑led, AI‑enabled incident response service.

The role combines hands-on technical credibility with executive-reporting duties, business development and operational leadership to expand the IR