Cybersecurity Incident Response Specialist

Position Summary

ExeQut is hiring a Cybersecurity Incident Response Specialist to investigate, contain, eradicate, and recover from security incidents across endpoints, networks, identities, cloud, and applications helping clients respond to and learn from real-world threats.

What You Will Do

• Investigate and respond to cybersecurity incidents including ransomware, malware, phishing, account compromise, data theft, and lateral movement
• Perform incident triage, investigation, containment, eradication, and recovery
• Conduct threat hunting and root-cause analysis
• Perform basic digital forensics and malware analysis
• Identify and analyze IOCs/IOAs and map attacks to MITRE ATT&CK
• Investigate Windows, Linux, Active Directory, and cloud environments
• Work with SIEM and EDR/XDR platforms to investigate security events
• Develop and improve incident response playbooks and detection rules
• Prepare detailed incident reports, timelines, and remediation recommendations
• Support SOC/CSIRT operations and critical incident response

Preferred Qualifications

• Experience investigating ransomware, phishing, credential theft, and endpoint compromise

• Strong experience in Incident Response / DFIR / SOC / Threat Hunting

• Hands-on experience with Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR

• Strong Windows/Linux and networking knowledge

• Knowledge of PowerShell, Python, or Bash

• Strong understanding of MITRE ATT&CK and common attack techniques

• Saudi Nationality required