International Contract Incident Response (DFIR) Specialist

About the role

We are seeking an experienced Incident Response (DFIR) professional to join our international contract bench, based in Saudi Arabia. The role involves supporting high‑impact digital investigations of sophisticated cyber threats on a flexible, part‑time basis.

Key responsibilities

• Perform incident response and digital forensic investigations on active threat incidents and security breaches.
• Analyze live response data and forensic artifacts across Windows, macOS, Linux, cloud and SaaS environments.
• Investigate business email compromise, account takeover, and other identity‑related incidents.
• Conduct network analysis to uncover attacker behavior and indicators of compromise.
• Support investigations in AWS, GCP, Azure and other cloud‑native platforms.

Required profile

• Professional experience as an Incident Response consultant, SOC analyst or similar role.
• Strong understanding of Windows, macOS and Linux fundamentals and associated forensic artifacts.
• Experience with digital forensics, BEC investigations and network analysis.
• Ability to work independently while contributing to a collaborative incident response team.
• Availability to commit a few hours per week to contract assignments.

Required skills

• Windows
• macOS
• Linux
• AWS
• GCP
• Azure
• Network Analysis
• Digital Forensics
• Incident Response
• SaaS

What we offer

• Flexible contract‑based engagement that fits around existing professional commitments.
• Opportunity to work on live investigations involving ransomware, nation‑state threats and cloud environments.
• Collaboration with an experienced team of incident response and digital forensics specialists.
• Continuous exposure to emerging threats and advanced investigative techniques.