Cybersecurity Incident Response & Digital Forensics (DFIR) Specialist

Cloud Consultancy · Cybersecurity · Information Security · Bachelor's Degree · 3 months ago
Closed
This job closed on Oct 26, 2026 It was open for 61 days. Cloud Consultancy lists no other open roles right now.
86 Security roles in Saudi Arabia 3,074 remote Security roles
Location
In office (Riyadh)
Employment
Full-Time

Removed from the employer's board on Oct 26, 2026. First seen by Alion on Aug 27, 2026.

Overview
Company
What next

Open roles like this one

Security
Similar stack
Same company
Riyadh
In office · Nationals only · 5+ years exp · Bachelor's Degree · Riyadh
Cybersecurity
SIEM
Apply
SOC Analyst (L1) 1 hour ago
In office · Bachelor's Degree · Tashkent
Python
PowerShell
Bash
DevOps
Linux
Windows
TCP/IP
DNS
VPN
Cybersecurity
MITRE ATT&CK
SIEM
Apply
In office · Full-Time · Le Plessis-Robinson
Apply
Hybrid · Full-Time · Master's Degree · La Ciotat
Cybersecurity
ISO 27001
Apply
In office · Full-Time · Chennai
Apply
$104k – $166k per year · In office · TS/SCI · 5+ years exp · High School Diploma · Chantilly
DevOps
Linux
Windows
Cybersecurity
Autopsy
EnCase
X-Ways Forensics
Apply
≈ $76k – $144k per year (Estimated) · In office · Cologne
Python
PowerShell
DevOps
Splunk
Cybersecurity
CyberArk
ISO 27001
SentinelOne
MITRE ATT&CK
SIEM
Apply
≈ $31k – $57k per year (Estimated) · Hybrid · Full-Time · Moscow
Python
PowerShell
Bash
DevOps
Kali Linux
Linux
Windows
Cybersecurity
Nessus
OWASP ZAP
Nuclei
BloodHound
Wazuh
OpenVAS
MITRE ATT&CK
SIEM
Apply
≈ $106k – $209k per year (Estimated) · In office · Full-Time · Zurich
Python
DevOps
Kubernetes
HPC
Linux
Cybersecurity
Wazuh
MITRE ATT&CK
SIEM
Apply
≈ $23k – $55k per year (Estimated) · In office · Full-Time · 7+ years exp · Bengaluru
Python
PowerShell
AI/ML
Machine Learning
DevOps
GCP
Azure
AWS
Cybersecurity
Microsoft Sentinel
Microsoft Defender
MITRE ATT&CK
Zero Trust
Microsoft Defender for Cloud
Microsoft Entra ID
SIEM
Apply
In office · 6+ years exp · Riyadh
DevOps
IAM
Cybersecurity
Okta
CyberArk
Zero Trust
Ping Identity
Apply
≈ $23k – $54k per year (Estimated) · Hybrid · Contractor · 8+ years exp · Bachelor's Degree · Riyadh
Apply
In office · Contractor · 5+ years exp · Riyadh
Apply
Sales Executive 1 day ago
In office · Full-Time · Riyadh
Marketing
Salesforce
HubSpot
Apply
In office · Full-Time · 8+ years exp · Riyadh
Design
AutoCAD
Apply
See all jobs

Cloud Consultancy

Headquartered in Riyadh, Saudi Arabia (with regional offices in the United Arab Emirates, Egypt, and Oman), Cloud Consultancy for Digitalization & Security (CCDS) is an information technology and cybersecurity consulting firm specializing in systems integration and managed security solutions. Established to support enterprise digital transformation, the company delivers a comprehensive portfolio of technical services - including cloud infrastructure advisory, 24/7 managed security operations center (SOC) monitoring, security information and event management (SIEM) deployment, network security, and advanced threat detection. Serving corporate enterprises, financial institutions, and government entities across the Middle East, it provides integrated turnkey technologies and specialized technical support designed to secure critical digital assets and optimize operational efficiency.
ccds.ws · HQ: Riyadh, Saudi Arabia · Systems Integrators · Security Operations · Managed Security
Tech stack of Cloud Consultancy

Location: On-site - Riyadh, Saudi Arabia

Contract/engagement: Project-based managed cybersecurity services (13-month)

Minimum experience: 7+ years

Role Purpose

Lead and execute cybersecurity incident response and digital forensic investigations while preserving evidence and meeting regulatory reporting requirements.

Key Responsibilities

· Investigate cybersecurity incidents and determine attack scope, impact, entry vectors, and affected assets.

· Perform containment, eradication, recovery, root-cause analysis, and post-incident review activities.

· Collect, preserve, and analyze digital evidence in accordance with approved chain-of-custody procedures.

· Conduct disk, memory, network, endpoint, and malware analysis using appropriate forensic tools.

· Develop and maintain incident-response and DFIR procedures, playbooks, investigation methods, and evidence-handling guides.

· Prepare technical and executive incident reports, forensic findings, and RCA reports.

· Coordinate with internal teams and stakeholders and ensure incident classification and reporting comply with NCA requirements.

Requirements

Technical and Professional Requirements

· Saudi nationality is a must.

· Bachelor’s degree in Cybersecurity, Digital Forensics, Computer Science, or a related field.

· At least 7 years of experience in cyber incident response and digital forensic investigations.

· Strong knowledge of attacker behavior, incident investigation methods, NIST incident response, and MITRE ATT&CK.

· Hands-on experience with SIEM, EDR, EnCase, FTK, Volatility, Autopsy, or equivalent forensic and security tools.

· Strong understanding of digital evidence handling and chain of custody.

Personal Requirements

· Calm and decisive during high-pressure incidents.

· Strong investigative thinking, attention to detail, and professional judgment.

· Clear technical writing and the ability to communicate findings to both executives and technical teams.

· High integrity and strict respect for confidentiality.

Professional Certifications

Preferred: CISSP, GCIA, GSEC, GCIH, CISM, or equivalent.

What next
Get the next one before it closes
It was open for 61 days. 2,887 Security roles were posted this week.
A free account puts the new ones in your feed the day they appear, matched to your level and your pay.
Get them first, free See open roles like this
Free forever. No card. Under a minute.
This is one of many
2,096,590 more open roles from verified company boards, updated every day.
Browse all jobs Get matched roles