Remote International DFIR Incident Responder - Contract

Jobgether SRL; Saudi Arabia; On-site; SAR 276,000 - 482,000; Full time

Job summary

Jobgether SRL is seeking an International Contract Bench, Incident Response (DFIR) based in Saudi Arabia. The role involves responding to cyber threats, performing forensic investigations, and analyzing live data across Windows, macOS and Linux environments to identify attacker techniques.

You will handle BE(C) investigations, cloud-native workloads, and network traffic analysis while applying current threat intelligence to cases of ransomware and other sophisticated intrusions.

Qualifications

• Professional experience responding to cyber threats as an Incident Response consultant or SOC analyst.
• Strong understanding of Windows, macOS and Linux forensic artifacts.
• Experience with digital forensics and cloud-native investigations across AWS, GCP, Azure.

Responsibilities

• Perform incident response and digital forensic investigations of active threats.
• Analyze live response data and artifacts to identify malicious activity and attack methods.
• Investigate Windows, macOS and Linux environments with proper forensic techniques.
• Analyze BEC, account takeover and other identity-related incidents.
• Conduct network analysis to identify suspicious activity and IOCs.
• Support investigations in cloud-native environments (AWS, GCP, Azure, SaaS).
• Apply threat intelligence to investigative work and evolve IR practices.
• Share analysis and feedback to strengthen the incident response team.
• Take on IR assignments for several hours per week according to needs.

Skills

Incident Response

Digital Forensics

Threat Intelligence

Cloud Forensics

Network Analysis

BEC Investigations

Job description

Jobgether SRL is seeking an International Contract Bench, Incident Response (DFIR) based in Saudi Arabia. The role involves responding to cyber threats, performing forensic investigations, and analyzing live data across Windows, macOS and Linux environments to identify attacker techniques.

You will handle BE(C) investigations, cloud-native workloads, and network traffic analysis while applying current threat intelligence to cases of ransomware and other sophisticated intrusions.