Cybersecurity Incident Response Specialist

Position Summary ExeQut is hiring a Cybersecurity Incident Response Specialist to investigate, contain, eradicate, and recover from security incidents across endpoints, networks, identities, cloud, and applications helping clients respond to and learn from real-world threats. What You Will Do Investigate and respond to cybersecurity incidents including ransomware, malware, phishing, account compromise, data theft, and lateral movement Perform incident triage, investigation, containment, eradication, and recovery Conduct threat hunting and root-cause analysis Perform basic digital forensics and malware analysis Identify and analyze IOCs/IOAs and map attacks to MITRE ATT&CK Investigate Windows, Linux, Active Directory, and cloud environments Work with SIEM and EDR/XDR platforms to investigate security events Develop and improve incident response playbooks and detection rules Prepare detailed incident reports, timelines, and remediation recommendations Support SOC/CSIRT operations and critical incident response Preferred Qualifications Experience investigating ransomware, phishing, credential theft, and endpoint compromise

Desired Candidate Profile

Strong experience in Incident Response / DFIR / SOC / Threat Hunting Hands-on experience with Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR Strong Windows/Linux and networking knowledge Knowledge of PowerShell, Python, or Bash Strong understanding of MITRE ATT&CK and common attack techniques Saudi Nationality required