Senior Incident Response & Forensics Manager VIP Lead

CPX; Abu Dhabi; On-site; AED 350,000 - 650,000; Full time

Job summary

CPX is seeking a Senior Manager to lead the Incident Response & Forensics Team within a high-impact cyber defence environment. You will own people management, direct DFIR operations, and act as the main escalation and crisis management decision-maker.

You will coordinate incident response engagements, lead threat hunting, and drive continuous improvement across the DFIR Lab and related services for a VIP on-site customer. Strong technical depth in forensics and blue team operations is essential.

Qualifications

• Minimum 10 years in IT security and/or security infrastructure
• At least 6 years in a security role within an incident response team
• 4 years of incident response team management or equivalent blue team leadership
• Experience performing digital forensics is a must

Responsibilities

• Own and oversee a DFIR team for a VIP on-site customer
• Lead incident response engagements and coordinate crisis management
• Coordinate threat hunting and proactive SOC activities
• Draft detailed reports and technical briefs for clients
• Lead and mentor DFIR staff and drive service improvement
• Perform host/network forensics across multiple platforms
• Guide remediation and recovery activities with stakeholders

Skills

Blue team operations

Digital forensics

Network protocols

Network forensics

Windows

Linux/OSX

IT security infrastructure

Scripting (Shell/Python/PowerShell)

PICERL/NIST IR standards

Team leadership

Education

CS/InfoSec degree

Job description

CPX is seeking a Senior Manager to lead the Incident Response & Forensics Team within a high-impact cyber defence environment. You will own people management, direct DFIR operations, and act as the main escalation and crisis management decision-maker.

You will coordinate incident response engagements, lead threat hunting, and drive continuous improvement across the DFIR Lab and related services for a VIP on-site customer. Strong technical depth in forensics and blue team operations is essential.