Incident Response and Forensic Investigation Specialist (DFIR)

Responsibilities

• Lead incident response engagements in unknown environments until all threats are remediated
• Develop custom incident response plans tailored to specific customer environments
• Perform forensic analysis of artifacts including RAM, packet captures, logs, and disk images
• Reverse engineer malicious software to develop signatures and indicators of compromise
• Research Red Team techniques and conduct proactive threat hunts
• Develop custom incident response tools, scripts, and detection content
• Create and present detailed customer reports to ensure accuracy and value
• Educate and train other analysts in incident response processes and forensic techniques

Requirements

• Degree in Computer Science, Information Systems, Electrical Engineering, or a related field
• 7+ years of experience in information security (SOC, incident handling, malware analysis, etc.)
• 2-3 years of experience in a senior or lead role guiding other security professionals
• Active CREST or GIAC certification (e.g., CRIA, GCFR, GCFA, CC-HIA, CC-NIA, CC-IM, CC-TIM, or GREM)
• Proven experience handling APT and Ransomware incident response engagements
• Proficiency in scripting languages such as Python, PowerShell, or Bash
• Strong knowledge of Red Team tactics and enterprise-scale adversary traces

Preferred Qualifications

• Additional certifications such as CISSP, GCIA, GCIH, GCFE, or OSCP
• Deep TCP/IP and networking knowledge
• Experience with Windows, Linux, or OSX forensics

Benefits

• Health insurance with a leading global provider
• Career progression and growth through challenging projects
• Employee engagement and wellness campaigns
• Excellent learning and development opportunities
• Inclusive and diverse working environment
• Flexible/Hybrid working environment

About the Company

Help AG is the cybersecurity arm of e& enterprise and a leading provider of strategic consultancy and tailored information security services across the Middle East. Established in 2004, Help AG serves as a trusted, vendor-agnostic IT security advisor to enterprises and governments, helping them strengthen their cyber defenses and safeguard their businesses.