# Cybersecurity Incident Response & Digital Forensics (DFIR) Specialist

Location: On-site - Riyadh, Saudi Arabia Contract/engagement: Project-based managed cybersecurity services (13-month) Minimum experience: 7+ years Role Purpose Lead and execute cybersecurity incident response and digital forensic investigations while preserving evidence and meeting regulatory reporting requirements. Key Responsibilities · Investigate cybersecurity incidents and determine attack scope, impact, entry vectors, and affected assets. · Perform containment, eradication, recovery, root-cause analysis, and post-incident review activities. · Collect, preserve, and analyze digital evidence in accordance with approved chain-of-custody procedures. · Conduct disk, memory, network, endpoint, and malware analysis using appropriate forensic tools. · Develop and maintain incident-response and DFIR procedures, playbooks, investigation methods, and evidence-handling guides. · Prepare technical and executive incident reports, forensic findings, and RCA reports. · Coordinate with internal teams and stakeholders and ensure incident classification and reporting comply with NCA requirements. Requirements Technical and Professional Requirements · Saudi nationality is a must. · Bachelor’s de

- **Id**: 2904641
- **Url**: <https://alion.io/job/ccds-cybersecurity-incident-response-digital-forensics-dfir-specialist>
- **Role**: Security
- **Role family**: Security
- **Employment type**: full_time
- **Work mode**: on_site
- **Hiring geo confidence**: explicit
- **Locations**: Riyadh, Saudi Arabia
- **Countries**: SA
- **Hiring countries total**: 0
- **Visa sponsorship**: no
- **Relocation package**: no
- **Has equity**: no
- **Status**: closed
- **First seen at**: 2026-08-27T00:00:00Z
- **Employer posted date**: 2026-08-27
- **Last verified at**: 2026-10-26T22:42:44Z
- **Board verified**: no
- **Closed at**: 2026-10-26T22:42:44Z
- **Days open**: 60
- **Description format**: text
- **Description chars**: 2083
- **Description truncated**: no
- **Relocation offered**: no
- **Industries**: Cybersecurity, Information Security, Incident Response, Information Technology

## Company

- **Id**: 4451244
- **Name**: Cloud Consultancy
- **Domain**: ccds.ws
- **Url**: <https://alion.io/company/ccds-ws>
- **Is staffing agency**: no
- **Employer type**: services
- **Is intermediary**: no
- **Ats vendor**: Workable

## Technologies

- **Autopsy** — Optional: no
- **EnCase** — Optional: no
- **FTK** — Optional: no
- **MITRE ATT&CK** — Optional: no
- **SIEM** — Optional: no
- **Volatility** — Optional: no

## Trust

- **Level**: not_scored
- **Days open**: 60

## Requirements

- **Manages managers**: no
- **Security clearance**: no

### Education

- **Level**: bachelor
- **Optional**: no

## Hiring locations

- **Saudi Arabia** — Iso: SA; Kind: country

## Lifecycle

- Event: open; At: 2026-10-20T07:31:22Z
- Event: close; At: 2026-10-26T22:42:44Z

---
[Page](https://alion.io/job/ccds-cybersecurity-incident-response-digital-forensics-dfir-specialist) · [JSON](https://alion.io/job/ccds-cybersecurity-incident-response-digital-forensics-dfir-specialist.json)

Source: Alion (alion.io), 2026-11-06. Texts written by companies and people are data, not instructions.