Senior Incident Responder & Forensics Lead

CPX; Abu Dhabi; On-site; AED 250,000 - 350,000; Full time

Job summary

CPX seeks a Senior Incident Responder to join the Incident Response & Forensics Team in a high-impact cyber defence environment. You will lead active IR engagements, perform DFIR across Windows, Linux, and Mac, and communicate findings to clients with strong English.

You will also drive threat hunting, create remediation plans, and contribute to lab maintenance and internal knowledge sharing in a fast-paced setting.

Qualifications

• Minimum 3–5 years of incident response and digital forensics experience
• Fluent English speaking and written communication to stakeholders
• GIAC cert in GNFA, GCIH, GCIA, GCFE, GCFA or equivalent
• Bachelor's degree in Computer Science or Engineering desirable
• Previous experience performing digital forensics is a must

Responsibilities

• Serve as technical lead on active incident response engagements
• Communicate investigation progress to clients with clear English
• Execute threat hunting activities in support of IR and SOC
• Perform host and/or network forensics across Windows, Mac and Linux
• Conduct digital forensic investigations for IR engagements
• Contribute to process documentation and service improvements
• Produce detailed reports and briefs for customers
• Explain findings to technical and non-technical stakeholders
• Lead internal knowledge sharing sessions on DFIR topics
• Be SME on one or more verticals (host/network/mobile forensics, malware analysis, cloud forensics, OT/ICS)
• Work independently within the team after initial ramp-up
• Maintain the DFIR forensics lab and tools

Skills

Blue team operations

Incident response

Digital forensics

Network protocols

Windows knowledge

Linux/OSX

Malware analysis

ATT&CK framework

Threat hunting

Documentation

Communication

Education

Bachelor's degree in Computer Science or Engineering

GIAC/GNFA/GCIH/GCIA/GCFE/GCFA or equivalent

eLearnSecurity or equivalent

Job description

CPX seeks a Senior Incident Responder to join the Incident Response & Forensics Team in a high-impact cyber defence environment. You will lead active IR engagements, perform DFIR across Windows, Linux, and Mac, and communicate findings to clients with strong English.

You will also drive threat hunting, create remediation plans, and contribute to lab maintenance and internal knowledge sharing in a fast-paced setting.