Incident Response Security Consultant, Mandiant
United Arab Emirates
The Role
This consultant-level position involves leading complex, high-profile incident response engagements for enterprise clients. Day-to-day responsibilities include host and network forensics, cloud evidence examination, log analysis, malware triage, threat hunting, and the development of comprehensive reports and presentations for both technical and executive stakeholders.
Skills & Experience
Candidates need at least three years of investigative experience across network forensics, disk and memory forensics, cloud forensics, or malware triage, combined with three years of end-to-end IR experience. Preferred certifications include GCFA, GCFE, GNFA, GREM, GCIH, and GX-FA, alongside familiarity with cloud platforms and CTF environments.
Who It Suits
This role suits an experienced incident responder with strong forensic foundations who is comfortable advising clients under pressure, communicating findings to senior leadership, mentoring junior colleagues, and travelling up to 30% of the time across the region.
Compare Incident Response salaries in United Arab Emirates →
Certifications mentioned: GCFA · GCFE · GREM · GNFA · GCIH — find training for these on the DFIR Training Finder.
