Senior Consultant - FortiGuard Incident Response

Fortinet
Riyadh
Workplace: OnsiteFull timeFunction: Consulting & AdvisoryExperience: 5+ yearsEducation: bachelorsSkills: ["Communication","Customer-facing","Mentoring","Process improvement","Ability to work under pressure"]

Lead and manage customer-facing incident response engagements, working directly with a world-class incident response and forensics team. Use threat actor TTP knowledge and FortiEDR to provide situational awareness and guidance to clients and team members. Perform host-based analysis, network forensics, log review, memory and file analysis, and basic reverse engineering. Deliver reports and presentations, monitor underground forums and OSINT, and train/mentor junior analysts while improving IR processes.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Fortinet
Fortinet
5 months ago

Senior Consultant - FortiGuard Incident Response

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 31 minutes agoStatus: Live

Job Summary

Lead and manage customer-facing incident response engagements, working directly with a world-class incident response and forensics team. Use threat actor TTP knowledge and FortiEDR to provide situational awareness and guidance to clients and team members. Perform host-based analysis, network forensics, log review, memory and file analysis, and basic reverse engineering. Deliver reports and presentations, monitor underground forums and OSINT, and train/mentor junior analysts while improving IR processes.
Location: Riyadh
Workplace: Onsite
Employment Type: Full time
Job Function: Consulting & Advisory
Seniority: Mid level

Key Responsibilities

  • •Lead and manage incident response engagements and provide guidance using threat actor tactics, techniques, procedures, and tools.
  • •Assist the IR Lead during engagements and mentor/train junior analysis.
  • •Perform host-based forensic analysis on Windows, Linux, and Mac OS X systems and conduct network forensics and log analysis.
  • •Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity.
  • •Use FortiEDR to investigate threats, perform memory/file analysis as needed, and create reports and presentations for executive and technical audiences.

Key Requirements

  • •Excellent written and verbal communication skills and ability to interface with customers.
  • •Experience with at least one scripting language (Shell, Ruby, Perl, Python, etc.).
  • •Ability to data mine to identify new threats using YARA, RegEx, or similar techniques.
  • •Experience with incident response and forensics, including host-based analysis and forensic functions on Windows, Linux, and Mac OS X.
  • •Familiarity with forensics and malware analysis tooling (e.g., EnCase, FTK, Splunk, Volatility, Wireshark/TCPDump, IDA Pro/OllyDbg/Immunity Debugger) plus hands-on work with APT TTPs and malware analysis.
Experience:5+ yearsIncident responseForensicsMalware analysisThreat intelligenceAPTEndpoint security
Education:Bachelor's in Computer Engineering, Computer Science or related field
Skills:CommunicationCustomer-facingMentoringProcess improvementAbility to work under pressure
Languages:English
Tech Stack:FortiGuardFortiEDRMalware huntingReverse engineeringThreat actor TTPsWindowsLinuxMac OS XHost-based analysisNetwork forensicsLog analysisFirewall logsWeb logsDatabase logsMemory forensicsFile analysisOpen-source intelligenceOSINTYARARegEx

Company Brief

Fortinet
Provides enterprise cybersecurity solutions including data protection, cloud security, network security, and user and entity behavior analytics to help organizations prevent insider threats, secure cloud and on-premises environments, and enforce data loss prevention policies.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Funding: Private Equity Backed
Headquarters: Austin, United States
Founded: 1994
WebsiteLinkedIn