Kualitatem Inc. تعلن عن وظيفة أخصائي استجابة للحوادث والتحقيقات الرقمية في الرياض

Minimum Qualifications:

• A bachelor’s degree in cybersecurity, digital forensics, computer science, or a related discipline.
• Obtaining one of the following professional certifications is preferred: CISSP, GCIA, GSEC, GCIH, CISM, or equivalent.

Job Requirements:

• The applicant must be a Saudi.
• A bachelor’s degree in cybersecurity, digital forensics, computer science, or a related discipline.
• No less than 7 years of experience in the field of cyber incident response and digital forensic investigations.
• Strong knowledge of cyber attack techniques, threat behaviour, and incident investigation methodologies.
• Experience in using security and forensic tools such as: EDR, SIEM, EnCase, FTK, Volatility, Autopsy.
• Knowledge of incident response frameworks such as NIST and MITRE ATT&CK.
• Understanding of the procedures for handling digital evidence and the chain of custody.
• Familiarity with threat frameworks such as MITRE.
• Strong skills in analysis, investigation, report preparation and communication.

Principal Responsibilities:

• Carrying out investigations relating to cybersecurity incidents and responding to them.
• Analysing incidents to determine the scope of the attack, its impact, and the means of intrusion used.
• Carrying out incident containment activities, eliminating threats, and restoring systems.
• Conducting digital forensic analyses such as disk, memory and network analysis.
• Collecting, preserving and analysing digital evidence in accordance with the approved procedures.
• Conducting malware analysis and investigating attacker activity on compromised systems.
• Developing and maintaining incident response and digital forensic investigation procedures and guides (Playbooks).
• Preparing incident reports, forensic analysis results, and root cause analysis (RCA).
• Coordinating with internal teams and stakeholders during incident investigation and remediation of their effects.
• Developing and improving the processes, procedures and policies for investigation, incident response and digital forensics.
• Preparing and updating investigation methodologies and working guides specific to DFIR.
• Coordinating with internal departments to support investigations and incident response activities.
• Ensuring alignment with regulatory requirements and compliance requirements, including the requirements of the Cybersecurity Authority (NCA).
• Verifying the classification of incidents to ensure compliance with regulatory reporting requirements.