Cybersecurity Incident Response & Digital Forensics (DFIR) Specialist

Location: On-site – Riyadh, Saudi Arabia Contract/engagement: Project-based managed cybersecurity services (13-month) Minimum experience: 7+ years Role Purpose Lead and execute cybersecurity incident response and digital forensic investigations while preserving evidence and meeting regulatory reporting requirements. Key Responsibilities ·      Investigate cybersecurity incidents and determine attack scope, impact, entry vectors, and affected assets. ·      Perform containment, eradication, recovery, root-cause analysis, and post-incident review activities. ·      Collect, preserve, and analyze digital evidence in accordance with approved chain-of-custody procedures. ·      Conduct disk, memory, network, endpoint, and malware analysis using appropriate forensic tools. ·      Develop and maintain incident-response and DFIR procedures, playbooks, investigation methods, and evidence-handling guides. ·      Prepare technical and executive incident reports, forensic findings, and RCA reports. ·      Coordinate with internal teams and stakeholders and ensure incident classification and reporting comply with NCA requirements.