Global Contract DFIR Investigator – Incident Response

Lever, Inc.; Saudi Arabia; On-site; SAR 120,000 - 240,000; Part time

Benefits offered by this job

Flexible contract-based engagement

Live IR investigations

Hands-on exposure to ransomware and云端取

Collaborative IR team

Job summary

Lever, Inc. and its partner seek an International Contract Bench, Incident Response (DFIR) based in Saudi Arabia.

You will support high-impact digital investigations involving sophisticated cyber threats, applying deep technical expertise across endpoints, networks, cloud, and SaaS environments. This flexible contract role allows you to stay technically engaged while balancing existing commitments, handling live response data, and contributing to cases ranging from ransomware to nation-state

Qualifications

• Professional experience responding to cyber threat activity as an Incident Response consultant, SOC analyst, or in a closely related role.

Responsibilities

• Perform incident response and digital forensic investigations involving active threat activity and security breaches.
• Analyze live response data and forensic artifacts to identify malicious activity, determine attack methods, and support investigations.
• Investigate Windows, macOS, and Linux environments using appropriate forensic techniques and tooling.
• Analyze business email compromise (BEC), account takeover, and other identity-related incidents.
• Conduct network analysis to identify suspicious activity, attacker behavior, and relevant indicators of compromise.
• Support investigations across cloud-native environments, including AWS, GCP, Azure, and SaaS applications.
• Apply threat intelligence and current knowledge of adversary techniques to investigative work.
• Contribute high-quality analysis to cases involving threats such as ransomware and sophisticated or nation-state activity.
• Share investigative perspectives, technical expertise, and feedback that help strengthen and evolve the incident response practice.
• Take on incident response assignments for a minimum of several hours per week, according to your availability and the needs of active investigations.

Skills

Incident response

Digital forensics

Cloud investigations

Windows

macOS

Linux

Job description

Lever, Inc. and its partner seek an International Contract Bench, Incident Response (DFIR) based in Saudi Arabia.

You will support high-impact digital investigations involving sophisticated cyber threats, applying deep technical expertise across endpoints, networks, cloud, and SaaS environments. This flexible contract role allows you to stay technically engaged while balancing existing commitments, handling live response data, and contributing to cases ranging from ransomware to nation-state