DFIR Lead: Incident Response & Digital Forensics

Red Sea Global; Riyadh; On-site; SAR 600,000 - 1,000,000; Full time

Job summary

Red Sea Global in Saudi Arabia is seeking a senior leader to manage its Digital Forensics and Incident Response (DFIR) program. You will oversee incident triage, containment and recovery across corporate, cloud, and OT environments, ensuring evidence is preserved and investigations stay within SLAs.

The role covers developing detection use cases, leading malware analysis, and coordinating with security policy, testing, and governance.

Qualifications

• Bachelor’s degree in computer science, information security, information systems, software engineering, or related field.
• Master’s degree in information security, cybersecurity management, or MBA with IT/security focus preferred.

Responsibilities

• Manage and oversee DFIR tooling configuration, tuning, and daily operations.
• Ensure incident response and forensic practices comply with policies and standards.
• Develop and maintain incident response plans, playbooks, and escalation matrices.
• Lead incident triage, containment, eradication, and recovery.

Skills

Cybersecurity

Digital forensics

Incident response

GCFA

GCFE

GCIH

GNFA

GREM

CISSP

Arabic

English

On-call rotation

Travel readiness

Education

Bachelor's degree in CS/IS/SE

Master's degree in InfoSec / Cybersecurity Mgmt or MBA IT Security

Job description

Red Sea Global in Saudi Arabia is seeking a senior leader to manage its Digital Forensics and Incident Response (DFIR) program. You will oversee incident triage, containment and recovery across corporate, cloud, and OT environments, ensuring evidence is preserved and investigations stay within SLAs.

The role covers developing detection use cases, leading malware analysis, and coordinating with security policy, testing, and governance.