Lead Incident Response & Forensics Consultant

Fortinet; Saudi Arabia; On-site; SAR 260,000 - 460,000; Full time

Job summary

Fortinet is seeking a Lead Consultant – FortiGuard Incident Response to manage incident response engagements and mentor a world-class team. You will leverage FortiEDR, perform malware analysis, and guide clients through complex investigations with executive-level updates.

The role requires strong consulting, deep technical skills, and the ability to work under tight timelines, including nights and weekends when incidents occur. Fortinet offers advanced security opportunities.

Qualifications

• Excellent written and verbal communication to clients and leadership.
• Experience interfacing with customers during investigations.
• Proficiency in at least one scripting language (Shell, Python, Ruby, etc).
• Ability to data mine using YARA or RegEx for threat discovery.
• Experience with forensic toolsets (EnCase, FTK, X-Ways, SIFT).
• Knowledge of malware analysis tools and reverse engineering basics.
• Familiarity with APT campaigns, TTPs and memory/forensic techniques.
• Solid understanding of OS internals and endpoint security.

Responsibilities

• Lead IR engagements and mentor junior analysts.
• Serve as primary client contact during investigations with clear updates.
• Improve processes for customer-facing IR services.
• Conduct host-level analysis on Windows, Linux, and macOS.
• Review logs to identify evidence of malicious activity.
• Leverage FortiEDR for rapid threat analysis.
• Perform memory forensics and file analysis as needed.
• Develop reports and presentations for executives and technical audiences.
• Availability during nights/weekends as needed.

Skills

Communication skills

Customer interfacing

Scripting (Shell/Python)

Threat hunting

Malware analysis

OS internals

Executive communication

Team mentoring

Education

Bachelor's degree or 10+ years IR/Forensics

Tools

IDA Pro

OllyDbg

Immunity Debugger

EnCase

FTK

SIFT

Splunk

Volatility

Wireshark

TCPDump

Job description

Fortinet is seeking a Lead Consultant – FortiGuard Incident Response to manage incident response engagements and mentor a world-class team. You will leverage FortiEDR, perform malware analysis, and guide clients through complex investigations with executive-level updates.

The role requires strong consulting, deep technical skills, and the ability to work under tight timelines, including nights and weekends when incidents occur. Fortinet offers advanced security opportunities.