Elite Cyber Incident Response Specialist

exequt MENA; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Benefits offered by this job

Performance-based pay

Bupa insurance (Golden Tier)

Mentorship & training

Job summary

ExeQut is seeking a hands-on Cybersecurity Incident Response Specialist in Riyadh to investigate, contain, eradicate, and recover from security incidents across endpoints, networks, identities, cloud, and applications.

You will work with SIEM/EDR tools, conduct threat hunting, and develop incident response playbooks while collaborating with clients on real-world threats in the Kingdom of Saudi Arabia. Saudi nationality is required.

Qualifications

• Experience in Incident Response / DFIR / SOC / Threat Hunting.
• Hands-on with Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR.
• Strong Windows/Linux and networking knowledge.
• Knowledge of PowerShell, Python, or Bash.
• Strong understanding of MITRE ATT&CK and common attack techniques.
• Saudi nationality required.

Responsibilities

• Investigate and respond to cybersecurity incidents across environments.
• Triage, containment, eradication, and recovery activities.
• Threat hunting and root-cause analysis.
• Develop incident response playbooks and detection rules.
• Prepare detailed incident reports and remediation guidance.
• Support SOC/CSIRT operations.

Skills

Incident Response

DFIR

Threat Hunting

SOC

MITRE ATT&CK

Tools

Splunk

Microsoft Sentinel

QRadar

CrowdStrike

SentinelOne

Microsoft Defender

Cortex XDR

Job description

ExeQut is seeking a hands-on Cybersecurity Incident Response Specialist in Riyadh to investigate, contain, eradicate, and recover from security incidents across endpoints, networks, identities, cloud, and applications.

You will work with SIEM/EDR tools, conduct threat hunting, and develop incident response playbooks while collaborating with clients on real-world threats in the Kingdom of Saudi Arabia. Saudi nationality is required.