Senior Incident Response & Forensics Leader

CPX; Abu Dhabi; On-site; AED 350,000 - 600,000; Full time

Job summary

CPX is seeking a Senior Manager of the Incident Response & Forensics Team to lead a high-impact blue team in a critical cyber defence environment. You will manage people and drive technical execution from DFIR lab operations to large-scale incident coordination for an on-site VIP client.

You will coordinate incident response engagements, perform threat hunting, and guide forensic investigations across multiple platforms.

Qualifications

• Minimum 10 years dedicated to IT security or security infrastructure experience.
• At least 6 years in a security role as part of an incident response team (CERT, CSIRT), including 4 years managing incident response teams or equivalent blue teams.
• Must have digital forensics experience.
• Scripting skills (Shell, Python, PowerShell) are a plus.
• Must have at least three of the following certifications: CISSP, GCIH, GCFA, GNFA, GCFE, OSCP, GREM, GDAT or equivalent.
• Bachelor’s / Master’s degree in computer science or information security desirable, but not mandatory.

Responsibilities

• Take ownership and oversight of a team who executes all aspects of reactive & proactive defensive security projects, including a DFIR Lab, for one on-site VIP customer.
• Perform the required duties of the Incident Response and Forensic Team’s Senior Manager (people and operational management).
• Serve as technical lead on active incident response engagements across different sub-entities for this VIP customer; coordinate investigations and resolution of large-scale incidents using PICERL/NIST IR standards.
• Lead threat hunting activities in support of incident response and proactive SOC operations.
• Provide SME in threat detection and cyber defence domains.
• Own the DFIR Lab & service for the VIP on-site customer; contribute to process documentation and service improvement.
• Lead and coordinate host and/or network-based forensics across various platforms.
• Coordinate digital systems and mobile forensic investigations supporting IR engagements.
• Draft detailed reports and technical briefs; communicate findings to VIP on-site stakeholders.
• Maintain calm in high-pressure situations and translate technical findings for both technical and non-technical audiences.
• Contribute to industry thought leadership through knowledge sharing sessions within the team.
• Develop talent through constructive direction to achieve targets and build DFIR capabilities.
• Lead research for service improvements and threat landscape understanding.
• Foster a team culture built on trust, respect, and unity.

Skills

Blue team operations

Threat hunting

Digital forensics

Network forensics

Windows

Linux/OSX

IT security architecture

Forensic reporting

PICERL/NIST IR

Team leadership

Education

Bachelor's/Master’s in CS or InfoSec

Job description

CPX is seeking a Senior Manager of the Incident Response & Forensics Team to lead a high-impact blue team in a critical cyber defence environment. You will manage people and drive technical execution from DFIR lab operations to large-scale incident coordination for an on-site VIP client.

You will coordinate incident response engagements, perform threat hunting, and guide forensic investigations across multiple platforms.