Cybersecurity Incident Response Specialist

About the role

ExeQut is seeking a skilled Cybersecurity Incident Response Specialist to join its fast‑growing consulting team. You will investigate, contain, eradicate, and recover from security incidents across endpoints, networks, identities, cloud, and applications for public and private sector clients in Saudi Arabia.

Key responsibilities

• Investigate and respond to ransomware, malware, phishing, account compromise, data theft, and lateral movement incidents.
• Perform triage, containment, eradication, recovery, threat hunting, root‑cause analysis, and basic digital forensics.
• Identify and analyze IOCs/IOAs, map attacks to the MITRE ATT&CK framework, and investigate Windows, Linux, Active Directory, and cloud environments.
• Work with SIEM and EDR/XDR platforms (e.g., Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, Cortex XDR) to analyze security events.
• Develop and improve incident response playbooks, detection rules, and detailed incident reports with timelines and remediation recommendations.
• Support SOC/CSIRT operations and critical incident response activities.

Required profile

• Strong experience in Incident Response, DFIR, SOC, or Threat Hunting.
• Hands‑on experience with at least one SIEM/EDR platform such as Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR.
• Deep knowledge of Windows, Linux, networking, and cloud environments.
• Proficiency in PowerShell, Python, or Bash scripting.
• Solid understanding of MITRE ATT&CK and common attack techniques.
• Saudi nationality is required.

Required skills

• Incident Response / DFIR
• SIEM/EDR tools (Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, Cortex XDR)
• Windows and Linux administration
• Networking concepts
• PowerShell, Python, Bash
• MITRE ATT&CK framework

What we offer

• Performance‑based compensation structure.
• Bupa medical insurance (Golden Tier).
• Ongoing training and mentorship from experienced leadership.
• Exposure to high‑impact projects with leading Saudi clients.
• A collaborative, growth‑oriented culture.