SOC Specialist: Incident Response & Digital Forensics (DFIR)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
Role Overview
The employer is seeking a DFIR Specialist to join a resident SOC supporting a leading government entity in Riyadh.
The role focuses on incident response and digital forensics and is performed on-site.
Key Skills for This Role
Full Job Posting
Role Overview
The employer is seeking a DFIR Specialist to join a resident SOC supporting a leading government entity in Riyadh.
The role focuses on incident response and digital forensics and is performed on-site.
Responsibilities
- Lead investigations and response for cybersecurity incidents.
- Perform disk, memory, and network forensic analysis.
- Maintain proper evidence handling and chain of custody.
- Conduct malware analysis and investigate attacker activity.
- Perform root cause analysis and produce incident reports.
- Develop and maintain incident response playbooks and DFIR procedures.
- Align incident handling with regulatory requirements, including NCA requirements.
Requirements
- Saudi national.
- Bachelor's degree in Cybersecurity, Digital Forensics, Computer Science, or a related field.
- At least 7 years of experience in incident response and digital forensics.
- Hands-on experience with EDR, SIEM, EnCase, FTK, Volatility, and Autopsy.
- Strong knowledge of NIST incident response frameworks and MITRE ATT&CK.
- Familiarity with NCA regulatory requirements.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at ES Consulting
Cloud Security & Encryption Specialist
Riyadh, KSA
ES Consulting is seeking Cloud Security & Encryption Specialists to support a government entity’s resident cybersecurity team in Riyadh. The role focuses on cloud security monitoring, posture management, alert investigat
Identity & Access Management (IAM) Specialist
Riyadh, KSA
ES Consulting is seeking IAM Specialists for a resident cybersecurity team supporting a government entity in Riyadh. The role manages identity lifecycles, access governance, certifications, MFA, privileged access, and au
Cybersecurity Architecture Specialist
Riyadh, KSA
ES Consulting is seeking Cybersecurity Architecture Specialists to support a government entity in Riyadh. The role covers architecture reviews, threat modeling, cloud and infrastructure security, Zero Trust, and risk-bas
SOC Specialist: Cyber Defense (Detection & Monitoring)
Riyadh, KSA
The employer is seeking a senior Cyber Defense Specialist to build and improve SOC detection and monitoring capabilities. The role requires 7+ years of SOC or cyber defense experience, a relevant bachelor's degree, detec
Cybersecurity Assurance Specialist: Penetration Testing
Riyadh, KSA
The employer is seeking two Penetration Testing Specialists for an on-site cybersecurity assurance team supporting a government entity in Riyadh. The role covers network, application, and cloud penetration testing, attac
Cybersecurity GRC Specialist
Riyadh, KSA
ES Consulting is seeking two Cybersecurity GRC Specialists to support a resident cybersecurity team serving a government entity in Riyadh. The role covers policy development, risk and remediation management, compliance a
Cloud Security & Encryption Specialist
Riyadh, KSA
Identity & Access Management (IAM) Specialist
Riyadh, KSA
Cybersecurity Architecture Specialist
Riyadh, KSA
SOC Specialist: Cyber Defense (Detection & Monitoring)
Riyadh, KSA
Cybersecurity Assurance Specialist: Penetration Testing
Riyadh, KSA
Cybersecurity GRC Specialist
Riyadh, KSA