Lead Incident Response Consultant
Skills
About This Role
Responsibilities
- Lead IR engagements and mentoring/training junior analysts
- Serve as the primary contact for clients during investigations, delivering clear technical and executive-level updates.
- Continue to focus on process improvement for the customer facing incident response services
- Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
- Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
- Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
- Perform memory forensics and file analysis as needed
- Contribute to threat intelligence consumption and generation within the FortiGuard threat intelligence ecosystem.
- Perform basic reverse engineering of threat actors malicious tools
- Develop complete and informative reports and presentations for both executive and technical audience
- Availability during nights/weekends as needed for IR engagements
Required Skills
- Excellent written and verbal communication skills
- Experience interfacing with customers
- Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
- Ability to data mine using YARA, RegEx or other techniques to identify new threats
- Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
- Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
- Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
- Strong knowledge of operating system internals and endpoint security experience.
- Able to communicate with both technical and executive personnel
- Static and dynamics malware and log analysis
- Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required.
- Highly motivated, self-driven and able to work both independently and within a team
- Able to work under pressure in time critical situations and occasional nights and weekends work
- A solid understanding of Active Directory and how to secure is a plus
Your resume, rewritten
for this exact role.
Sign up free — Base Career tailors your CV to this job description in 60 seconds.
01 / 05
Resume Tailored to This Job
Your keywords, structure, and story — rewritten to match this exact role and pass ATS filters.
Free · No card · 60 seconds
02 / 05
Cover Letter for This Role, Done
Job-specific cover letters written in Gulf professional tone — ready in seconds, not hours.
Free · No card · 60 seconds
03 / 05
See How Well You Fit This Role
AI match score with clear reasons — know your fit before investing time in the application.
Free · No card · 60 seconds
04 / 05
Apply in One Click
Autofill any application form on Workday, LinkedIn, Bayt, Greenhouse — with your tailored content.
Free · No card · 60 seconds
05 / 05
Track It. Follow Up at the Right Time.
Visual pipeline for every application with AI-timed follow-up reminders so nothing slips.
Free · No card · 60 seconds
2.2K+
Cover Letters & Follow-ups
1.8K+
Resumes Tailored
190.5K+
Jobs Tracked
Trusted by professionals at
Stop applying blindly.
Start getting hired.
Base Career automates the hardest parts of job searching — apply smarter, not harder.
AI Resume in 60s
Your resume rewritten for this exact role using the job description as the brief.
ATS-Optimized
Get past automated screening filters with the right keywords matched to each job.
Application Tracker
Track every job, follow-up, and interview in one visual kanban board.
Free plan · No credit card required