Lead Incident Response Consultant - Hands-on IR & Forensics

Fortinet, Inc.; As Sudiyah; On-site; OMR 60,000 - 100,000; Full time

Job summary

Fortinet, Inc. seeks a Lead Consultant for FortiGuard Incident Response to lead IR engagements, mentor analysts, and serve as the client-facing expert. You will leverage FortiEDR tooling, conduct host and memory forensics, and deliver concise executive updates while coordinating with a world-class team.

You will also contribute to threat research and client-facing blogs/presentations, maintaining high standards under tight timelines.

Qualifications

• Excellent written and verbal communication skills.
• Experience interfacing with customers.
• At least one scripting language (Shell, Ruby, Perl, Python).
• Ability to data mine using YARA, RegEx, or similar.

Responsibilities

• Lead incident response engagements and mentor junior analysts.
• Serve as primary client contact during investigations with clear updates.
• Analyze hosts, logs, and memory forensics across Windows, Linux, macOS.
• Produce reports and presentations for executives and technical audiences.

Skills

Communication skills

Customer facing

Scripting languages

YARA/Regex data mining

Education

Bachelor’s Degree in CS/CE or related

10+ years incident response/forensics

Tools

FortiEDR

EnCase

FTK

X-Ways

SIFT

Splunk

Volatility

Wireshark

TCPDump

Job description

Fortinet, Inc. seeks a Lead Consultant for FortiGuard Incident Response to lead IR engagements, mentor analysts, and serve as the client-facing expert. You will leverage FortiEDR tooling, conduct host and memory forensics, and deliver concise executive updates while coordinating with a world-class team.

You will also contribute to threat research and client-facing blogs/presentations, maintaining high standards under tight timelines.