Cybersecurity Incident Response & Digital Forensics (DFIR) Specialist

Location: On-site – Riyadh, Saudi Arabia

Contract/engagement: Project-based managed cybersecurity services (13-month)

Minimum experience: 7+ years

Role Purpose

Lead and execute cybersecurity incident response and digital forensic investigations while preserving evidence and meeting regulatory reporting requirements.

Key Responsibilities

·      Investigate cybersecurity incidents and determine attack scope, impact, entry vectors, and affected assets.

·      Perform containment, eradication, recovery, root-cause analysis, and post-incident review activities.

·      Collect, preserve, and analyze digital evidence in accordance with approved chain-of-custody procedures.

·      Conduct disk, memory, network, endpoint, and malware analysis using appropriate forensic tools.

·      Develop and maintain incident-response and DFIR procedures, playbooks, investigation methods, and evidence-handling guides.

·      Prepare technical and executive incident reports, forensic findings, and RCA reports.

·      Coordinate with internal teams and stakeholders and ensure incident classification and reporting comply with NCA requirements.

Requirements