Cybersecurity Incident Response Specialist

Exe Qut is hiring a Cybersecurity Incident Response Specialist to investigate contain eradicate and recover from security incidents across endpoints networks identities cloud and applications helping clients respond to and learn from real-world threats

Investigate and respond to cybersecurity incidents including ransomware malware phishing account compromise data theft and lateral movement Perform incident triage investigation containment eradication and recovery Conduct threat hunting and root-cause analysis Perform basic digital forensics and malware analysis Identify and analyze IOCs IOAs and map attacks to MITRE ATT amp CK Investigate Windows Linux Active Directory and cloud environments Work with SIEM and EDR XDR platforms to investigate security events Develop and improve incident response playbooks and detection rules Prepare detailed incident reports timelines and remediation recommendations Support SOC CSIRT operations and critical incident response

Experience investigating ransomware phishing credential theft and endpoint compromise Strong experience in Incident Response / DFIR / SOC / Threat Hunting Hands-on experience with Splunk, Microsoft Sentinel, QRadar, Crowd Strike, Sentinel One, Microsoft Defender, or Cortex XDR Strong Windows/Linux and networking knowledge Knowledge of Power Shell, Python, or Bash Strong understanding of MITRE ATT&CK and common attack techniques Saudi Nationality required