Senior Manager – Incident Response

Forensic Focus Limited; Abu Dhabi; On-site; AED 400,000 - 700,000; Full time

Job summary

Forensic Focus Limited seeks a Senior Manager of Incident Response onsite in Abu Dhabi to lead a dedicated DFIR team. You will coordinate active incident response, manage large-scale investigations, perform host and network forensics, mobile device investigations, and threat hunting for a high-profile client.

Ideal candidates bring expert blue team operations experience, fluency in NIST 800-61r2, and proven ability to mentor staff while communicating complex findings to technical and

Qualifications

• Expert-level knowledge of blue team operations and cyber defense.
• Deep experience in digital forensics methodologies and incident response.
• Track record leading complex, multi-entity investigations.
• Ability to communicate technical findings to varied stakeholders.

Responsibilities

• Manage incident response coordination for critical on-site client.
• Oversee investigations following PICERL/NIST 800-61r2 frameworks.
• Lead and mentor a DFIR team in a high-pressure environment.
• continuously improve service delivery and threat-hunting efforts.

Skills

Blue team operations

Digital forensics

Cyber incident response

Leadership & mentoring

Stakeholder communication

Job description

# Senior Manager – Incident Response*CPX***Abu Dhabi, Abu Dhabi Emirate**Onsite · Manager · Full-time### The RoleThis senior leadership position manages a dedicated incident response and forensics team serving a single high-profile on-site client. Day-to-day responsibilities span active incident response coordination, large-scale investigation management following PICERL/NIST 800-61r2 frameworks, host and network forensics, mobile device investigations, threat hunting, and continuous service improvement within an on-site DFIR Lab.### Skills & ExperienceCandidates must demonstrate expert-level knowledge of blue team operations, digital forensics methodologies, and cyber incident response. Experience leading complex, multi-entity investigations is essential, as is the ability to communicate technical findings clearly to both technical and non-technical stakeholders. Familiarity with NIST 800-61r2 and proactive threat hunting techniques is expected.### Who It SuitsThis role suits a seasoned DFIR professional ready to step into a people-management position without leaving hands-on technical work behind. It is ideal for someone who thrives under pressure, can lead crisis situations calmly, and is committed to mentoring talent and building a cohesive, high-performing security team in a critical-sector environment.