Senior Consultant – Incident Response
CPX
Abu Dhabi, Abu Dhabi Emirate
The Role
This position sits within a dedicated Incident Response and Forensics team, where the successful candidate leads active IR engagements, conducts host and network forensic investigations, and executes threat hunting activities. Day-to-day work includes log analysis, stakeholder reporting, contributing to a DFIR lab, and driving continuous service improvement.
Skills & Experience
Candidates need 3–5 years of hands-on DFIR experience covering Windows, Linux and macOS forensics, network analysis tools such as Zeek, Rita or Suricata, and malware analysis. At least one GIAC certification (GNFA, GCIH, GCFA, GCFE or equivalent) is required, alongside strong English communication and stakeholder management skills.
Who It Suits
The role suits an experienced DFIR practitioner who thrives in fast-paced, operationally critical environments, is comfortable leading investigations independently, and can communicate complex technical findings clearly to both technical and non-technical audiences. A team-oriented, adaptable mindset is essential.
Compare Incident Response salaries in United Arab Emirates →
Certifications mentioned: GCFA · GCFE · GNFA · GCIH — find training for these on the DFIR Training Finder.
