Lead Incident Response Consultant — IR & Forensics

Zoomcar; Kuwait City; On-site; KWD 16,740 - 27,900; Full time

Job summary

Zoomcar is seeking a Lead Consultant – FortiGuard Incident Response based in Kuwait City. In this role, you’ll lead incident response engagements and mentor junior analysts while interfacing with clients and providing updates throughout investigations.

The ideal candidate possesses strong technical skills with a focus on malware analysis and experience in incident response. You will work in a dynamic environment with opportunities for continuous improvement and professional development.

Qualifications

• Hands-on experience dealing with APT campaigns, attack TTPs, and malware persistence mechanisms.
• Ability to work independently and within a team under pressure during critical situations.
• Static and dynamic analysis of malware.

Responsibilities

• Lead incident response engagements and mentor junior analysts.
• Serve as the primary contact for clients during investigations.
• Conduct host-based analysis and forensic functions on multiple operating systems.
• Develop complete and informative reports for technical and executive audiences.

Skills

Excellent written and verbal communication skills

Experience interfacing with customers

Scripting languages

Data mining using YARA, RegEx

Experience with forensic tools

Malware analysis

Operating system internals

Static and dynamic malware analysis

Understanding of MAC internals

Active Directory security

Education

Bachelor's Degree in Computer Engineering, Computer Science or related field

10+ years' experience with incident response or Forensics

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

WireShark

TCPDump

IDA Pro

OllyDbg

Immunity Debugger

Job description

Zoomcar is seeking a Lead Consultant – FortiGuard Incident Response based in Kuwait City. In this role, you’ll lead incident response engagements and mentor junior analysts while interfacing with clients and providing updates throughout investigations.

The ideal candidate possesses strong technical skills with a focus on malware analysis and experience in incident response. You will work in a dynamic environment with opportunities for continuous improvement and professional development.