Senior Incident Response & Forensics Lead

Perception Point; Saudi Arabia; On-site; SAR 250,000 - 360,000; Full time

Job summary

Fortinet in Saudi Arabia seeks a Senior Consultant – FortiGuard Incident Response to lead and mentor a world-class IR team on security engagements. You will provide rapid situational awareness, guidance to clients, and develop threat research outputs as needed.

This hands-on role requires deep technical skills, strong consulting ability, and the ability to work under tight timelines with occasional after-hours commitments.

Qualifications

• Requires strong written and verbal communication.
• Experience interfacing with customers on security engagements.
• Experience with at least one scripting language (Shell, Python, etc.).
• Ability to data mine using YARA/RegEx or similar.
• Experience with major forensic tools and malware analysis tools.

Responsibilities

• Assist IR Lead during engagements and mentor junior analysts.
• Improve processes for customer-facing IR services.
• Conduct host-based analysis and forensics on Windows/Linux/Mac OS X.
• Perform network forensics and log analysis during IR engagements.
• Review logs to identify evidence of malicious activity.
• Use FortiEDR Platform to investigate threats.
• Perform memory forensics and file analysis as needed.
• Monitor FortiGuard Threat Labs and open-source intel for actor TTPs.
• Do basic reverse engineering of threat tools.
• Create reports/presentations for executives and technical audiences.
• Available during nights/weekends as needed.

Skills

Communication

Customer Interfacing

Scripting Languages

Malware Analysis

Forensics Tools

Memory Forensics

Network Forensics

Threat TTPs

Reverse Engineering

Education

Bachelor's Degree in Computer Engineering or Computer Science

5+ years incident response/forensics

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Wireshark

TCPDump

IDA Pro

OllyDbg

Immunity Debugger

Job description

Fortinet in Saudi Arabia seeks a Senior Consultant – FortiGuard Incident Response to lead and mentor a world-class IR team on security engagements. You will provide rapid situational awareness, guidance to clients, and develop threat research outputs as needed.

This hands-on role requires deep technical skills, strong consulting ability, and the ability to work under tight timelines with occasional after-hours commitments.