Threat-Hunting Incident Responder

ExeQut AI Consulting; Riyadh; On-site; SAR 180,000 - 280,000; Full time

Job summary

ExeQut AI Consulting is seeking a Cybersecurity Incident Response Specialist to investigate and respond to security incidents across endpoints, networks, identities, cloud and applications. You will play a key role in containment, eradication and recovery, while performing threat hunting and root-cause analysis.

Ideal candidates have hands-on experience with SIEM/EDR/XDR tools, strong Windows/Linux knowledge, and familiarity with MITRE ATT&CK.

Qualifications

• Experience investigating ransomware, phishing, credential theft and endpoint compromise.
• Hands-on with SIEM/EDR/XDR platforms for threat detection and response.
• Strong Windows/Linux and networking knowledge.
• Knowledge of PowerShell, Python or Bash scripting.
• Saudi nationality is required to work on client projects.

Responsibilities

• Investigate and respond to cybersecurity incidents including ransomware, malware, phishing, and data theft.
• Triage, investigate, contain, eradicate and recover from security incidents.
• Perform threat hunting and root-cause analysis.
• Conduct basic digital forensics and malware analysis.
• Identify IOCs/IOAs and map attacks to MITRE ATT&CK.
• Investigate Windows, Linux, AD and cloud environments.
• Work with SIEM and EDR/XDR platforms to investigate events.
• Develop and improve incident response playbooks and detection rules.
• Prepare detailed incident reports, timelines and remediation recommendations.
• Support SOC/CSIRT operations and critical incident response.

Skills

Incident Response

Threat Hunting

Digital Forensics

MITRE ATT&CK

Windows/Linux

Networking

PowerShell

Python

Bash

Tools

Splunk

Microsoft Sentinel

QRadar

CrowdStrike

SentinelOne

Microsoft Defender

Cortex XDR

Job description

ExeQut AI Consulting is seeking a Cybersecurity Incident Response Specialist to investigate and respond to security incidents across endpoints, networks, identities, cloud and applications. You will play a key role in containment, eradication and recovery, while performing threat hunting and root-cause analysis.

Ideal candidates have hands-on experience with SIEM/EDR/XDR tools, strong Windows/Linux knowledge, and familiarity with MITRE ATT&CK.