Senior Incident Response Lead — Threat Hunting & Forensics

Forensic Focus Limited; Abu Dhabi; On-site; AED 300,000 - 520,000; Full time

Job summary

Forensic Focus Limited is seeking an experienced Incident Responder to lead active engagements and support IR retainer clients. You will perform host-based and network forensics across Windows, Mac, and Linux, conduct threat hunting, and provide reports to strengthen client defenses.

The role emphasizes clear communication of technical findings to both technical and non-technical audiences, with opportunities to contribute to thought leadership through writing and sessions.

Qualifications

• Experience with host and network-based forensics.
• Proven ability to analyse full packet data.
• Experience with EDR tooling and security monitoring.

Responsibilities

• Lead incident response engagements and support IR retainer clients.
• Conduct host-based and network forensics across Windows, Mac, Linux.
• Write reports and advise customers on defensive security posture.
• Perform threat hunting and EDR-driven assessments.

Skills

Blue team operations

EDR tooling

Host forensics

Network forensics

Threat hunting

Technical communication

Job description

Forensic Focus Limited is seeking an experienced Incident Responder to lead active engagements and support IR retainer clients. You will perform host-based and network forensics across Windows, Mac, and Linux, conduct threat hunting, and provide reports to strengthen client defenses.

The role emphasizes clear communication of technical findings to both technical and non-technical audiences, with opportunities to contribute to thought leadership through writing and sessions.