Senior Incident Response & Forensics Lead

CPX; Abu Dhabi; On-site; AED 180,000 - 240,000; Full time

Job summary

CPX is seeking a Senior Manager to lead the Incident Response & Forensics Team in a high-impact cyber defence environment. You will own people management, coordinate crisis response, and drive investigations, reporting, and remediation for an on-site VIP customer.

You will oversee DFIR lab activities, lead threat hunts, and work across sub-entities to ensure effective incident handling and service improvements. Strong leadership with hands-on forensic expertise is essential.

Qualifications

• 10+ years in IT security or security infrastructure.
• At least 6 years in a security role within an incident response team (CERT, CSIRT).
• 4 years of incident response team management or equivalent.
• Experience in digital forensics is a MUST.
• Strong English language skills, both spoken and written.
• Bachelor’s / Master in CS or InfoSec desirable, but not mandatory.

Responsibilities

• Take ownership of a team executing defensive security projects for a VIP customer.
• Lead IR and forensic engagements and incident response leadership.
• Coordinate host and network forensics across platforms.
• Draft detailed reports and technical briefs for VIP on-site client.
• Develop talent and lead continuous service improvements within the DFIR team.
• Coordinate threat hunting and SOC activities in support of incident response.

Skills

Blue team operations

Threat hunting

Digital forensics

Network protocols (TCP/IP)

Windows

Linux/OSX

IT security infrastructure

Forensic skills across OS

PICERL/NIST IR standards

Education

Bachelor’s / Master in CS or InfoSec

Certifications: CISSP, GCIH, GCFA, GNFA, GCFE, OSCP, GREM, GDAT

Tools

PICERL

NIST IR standards

Forensic tools

Job description

CPX is seeking a Senior Manager to lead the Incident Response & Forensics Team in a high-impact cyber defence environment. You will own people management, coordinate crisis response, and drive investigations, reporting, and remediation for an on-site VIP customer.

You will oversee DFIR lab activities, lead threat hunts, and work across sub-entities to ensure effective incident handling and service improvements. Strong leadership with hands-on forensic expertise is essential.