Senior Incident Response Lead — Flexible Schedule

CPX; Abu Dhabi; On-site; AED 300,000 - 540,000; Full time

Job summary

CPX is seeking a Principal Consultant – Incident Response to lead blue team operations and IR engagements in a fast-paced security environment. You will perform threat hunting, host and network forensics, and produce client-ready reports.

You will work with EDR/forensic tools across Windows, Linux, and macOS, collaborating closely with clients to strengthen defenses and reduce risk. A strong communicator with GIAC certs will excel.

Qualifications

• 6+ years of work experience in incident response or blue team operations.
• GIAC cert in GNFA, GCIH, GCIA, GCFE, GCFA or equivalent.
• Experience with EDR and threat-hunting tools.
• Strong reporting and communication skills.
• Bachelor's degree in Computer Science or Engineering preferred.

Responsibilities

• Serve as technical lead on active IR engagements and retainer customers.
• Achieve tasks independently within the team after initial period.
• Execute threat hunting activities to support IR and environment assessments.
• Carry out host/network forensics across Windows, Linux, and macOS.
• Produce detailed reports and technical briefs for customers.
• Collaborate with customers to improve security posture.
• Contribute to process documentation and continuous improvement.
• Demonstrate thought leadership through internal knowledge sharing.

Skills

Blue team operations

Threat hunting

EDR tools

Network analysis

Forensics

ATT&CK framework

Windows

Linux/OSX

Log analysis

Malware analysis

Documentation

Independent work

Team collaboration

Education

Bachelor's degree in Computer Science or Engineering

Tools

EDR tools

Threat-hunting tools

Bro/Zeek

Rita

Suricata

Wireshark

Job description

CPX is seeking a Principal Consultant – Incident Response to lead blue team operations and IR engagements in a fast-paced security environment. You will perform threat hunting, host and network forensics, and produce client-ready reports.

You will work with EDR/forensic tools across Windows, Linux, and macOS, collaborating closely with clients to strengthen defenses and reduce risk. A strong communicator with GIAC certs will excel.