Cybersecurity Incident Response Specialist

ExeQut AI Consulting; Riyadh; Presencial; SAR 180.000 - 280.000; Jornada completa

Descripción de la vacante

ExeQut AI Consulting is seeking a Cybersecurity Incident Response Specialist to investigate and respond to security incidents across endpoints, networks, identities, cloud and applications. You will play a key role in containment, eradication and recovery, while performing threat hunting and root-cause analysis.

Ideal candidates have hands-on experience with SIEM/EDR/XDR tools, strong Windows/Linux knowledge, and familiarity with MITRE ATT&CK.

Formación

• Experience investigating ransomware, phishing, credential theft and endpoint compromise.
• Hands-on with SIEM/EDR/XDR platforms for threat detection and response.
• Strong Windows/Linux and networking knowledge.
• Knowledge of PowerShell, Python or Bash scripting.
• Saudi nationality is required to work on client projects.

Responsabilidades

• Investigate and respond to cybersecurity incidents including ransomware, malware, phishing, and data theft.
• Triage, investigate, contain, eradicate and recover from security incidents.
• Perform threat hunting and root-cause analysis.
• Conduct basic digital forensics and malware analysis.
• Identify IOCs/IOAs and map attacks to MITRE ATT&CK.
• Investigate Windows, Linux, AD and cloud environments.
• Work with SIEM and EDR/XDR platforms to investigate events.
• Develop and improve incident response playbooks and detection rules.
• Prepare detailed incident reports, timelines and remediation recommendations.
• Support SOC/CSIRT operations and critical incident response.

Conocimientos

Incident Response

Threat Hunting

Digital Forensics

MITRE ATT&CK

Windows/Linux

Networking

PowerShell

Python

Bash

Herramientas

Splunk

Microsoft Sentinel

QRadar

CrowdStrike

SentinelOne

Microsoft Defender

Cortex XDR

Descripción del empleo

Position Summary

ExeQut is hiring a Cybersecurity Incident Response Specialist to investigate contain eradicate and recover from security incidents across endpoints networks identities cloud and applications helping clients respond to and learn from real-world threats

What You Will Do

Investigate and respond to cybersecurity incidents including ransomware malware phishing account compromise data theft and lateral movement Perform incident triage investigation containment eradication and recovery Conduct threat hunting and root-cause analysis Perform basic digital forensics and malware analysis Identify and analyze IOCs IOAs and map attacks to MITRE ATT amp CK Investigate Windows Linux Active Directory and cloud environments Work with SIEM and EDR XDR platforms to investigate security events Develop and improve incident response playbooks and detection rules Prepare detailed incident reports timelines and remediation recommendations Support SOC CSIRT operations and critical incident response

Preferred Qualifications

Experience investigating ransomware phishing credential theft and endpoint compromise Strong experience in Incident Response / DFIR / SOC / Threat Hunting Hands-on experience with Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR Strong Windows/Linux and networking knowledge Knowledge of PowerShell, Python, or Bash Strong understanding of MITRE ATT&CK and common attack techniques Saudi Nationality required