Overview
DFIR Analyst Jobs in Abu Dhabi, UAE/Dubai at CyberGate Defense
Responsibilities
- Lead and participate in all phases of the incident response lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post incident activity.
- Conduct in-depth digital forensic investigations to identify the root cause, scope, and impact of security incidents.
- Collect, preserve, and analyze digital evidence from various sources (e.g., endpoints, networks, cloud environments).
- Utilize forensic tools and techniques to reconstruct events, identify attacker methodologies, and attribute threats.
- Develop and implement incident containment and eradication strategies.
- Prepare detailed incident reports, including technical findings, remediation recommendations, and lessons learned.
- Collaborate with internal teams (e.g., IT, legal, compliance) and external partners (e.g., law enforcement, third-party vendors) during incident response efforts.
- Contribute to the development and improvement of DFIR processes, playbooks, and tools.
- Stay current with the latest threat intelligence, attack techniques, and forensic methodologies.
- Provide training and mentorship to junior team members.
Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field (or equivalent practical experience).
- Minimum of 3-5 years of experience in digital forensics and incident response.
- Strong understanding of operating systems (Windows, Linux, macOS), network protocols, and cloud platforms.
- Proficiency with industry-standard forensic tools (e.g., EnCase, FTK, X-Ways, Volatility) and incident response platforms.
- Experience with scripting languages (e.g., Python, Power Shell) for automation and analysis.
- In-depth knowledge of common attack vectors, malware analysis, and threat intelligence.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong written and verbal communication skills, with the ability to present complex technical information clearly and concisely.
Preferred Certifications (one or more of the following)
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Forensic Examiner (GCFE)
- GIAC Reverse Engineering Malware (GREM)
- CompTIA CySA+
Technical Skills
- Digital evidence collection and preservation
#J-18808-Ljbffr
Title: DFIR Analyst
Company: CyberGate Defense
Location: Abu Dhabi, UAE/Dubai
Category: