Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

The Role

This position sits within a Cyber Defence team and involves leading incident response engagements both remotely and on-site at client premises. Day-to-day work includes forensic analysis of artefacts such as disk images, RAM and packet captures, malware reverse engineering, threat hunting, and developing custom detection content and response plans tailored to individual customer environments.

Skills & Experience

Candidates should bring hands-on experience analysing logs from security technologies including firewalls, IDS/IPS, antivirus platforms and VPNs, alongside proficiency in malware analysis and indicator-of-compromise development. Familiarity with established incident response frameworks such as SANS is expected, and experience scripting or building response tooling is highly valued.

Who It Suits

This role suits a UAE National with a genuine passion for digital forensics and incident response who is comfortable operating in ambiguous, high-pressure environments. Someone who enjoys both independent technical investigation and client-facing engagements, and who actively contributes to team knowledge through documentation, research and knowledge sharing, will thrive here.