Digital Forensics and Incident Response consultant

About the Role

This is a

high-impact , hands-on role that puts you on the front lines of some of the most challenging incident response and threat hunting engagements. You’ll work across diverse industries, confronting real-world cyber threats and helping clients recover from complex incidents. Your expertise will directly shape outcomes, protect critical infrastructure, and contribute to a safer digital environment. This role is ideal for professionals eager to sharpen their DFIR skills while operating in fast-paced, high-stakes environments. Your Mission

Conduct root cause analysis to determine the initial attack vector in security incidents. Lead incident response engagements, including containment, eradication, and recovery guidance. Acquire and analyze disk and memory forensic images, as well as perform triage analysis. Recover deleted data, trace file execution, and validate indicators of compromise (IOCs). Develop attack hypotheses using adversary TTPs mapped to the MITRE ATT&CK framework. Prepare and deliver clear, actionable reports and findings to both technical and non-technical stakeholders. Maintain composure and communicate effectively in high-pressure, time-sensitive incidents. What Success Looks Like

Minimum first hands-on experience in Digital Forensics and Incident Response. Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or equivalent professional experience. Proficiency in analyzing forensic artifacts such as : Windows registry Master File Table (MFT) Prefetch files Shellbags Experience working with EDR platforms and SIEM solutions. Strong understanding of attacker methodologies, MITRE ATT&CK, and the intrusion kill chain. Additional requirements : Strong problem-solving mindset and attention to detail. Ability to remain calm under pressure during active incidents. One or more of the following : GCFA, GCIH, GNFA, GCFE, CHFI, GCFR, OSCP, or similar. Our Work Environment & Culture

At Group-IB, we believe that employee happiness is fundamental to success. We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow. Whether you’re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development. Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges. You’ll be working with cutting-edge technologies recognized globally and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients. We take pride in our multicultural, values-driven culture—where mutual respect, collaboration, and shared goals unite us across borders. And with Group-IB’s continued global growth and financial stability, your career trajectory here can accelerate faster than in most traditional environments. What We Offer

Flexible Work Schedule – you have the freedom to design your own workday in a way that drives results and balance. Health insurance to support your well-being. Certifications & Continuous Learning – our team holds over 1,000 globally recognized certifications; we cover the cost of professional development. Internal programs for soft skills and advanced technical training to help you expand your skill set. Entrepreneurial spirit is encouraged – bold ideas are supported and celebrated. Seniority level

Mid-Senior level Employment type

Full-time Job function

Information Technology Industries : Computer and Network Security and Security and Investigations Referrals increase your chances of interviewing at Group-IB. Get notified about new Digital Specialist jobs in Riyadh, Saudi Arabia.

#J-18808-Ljbffr