Regional Technical Lead DFIR📣 إعلان

About Group-IB and the Role

Group-IB, founded in 2003 and headquartered in Singapore, is a leading creator of cybersecurity technologies focused on investigating, preventing, and combating digital crime. The company operates Digital Crime Resistance Centers (DCRCs) across the Middle East, Europe, Central Asia, and Asia-Pacific to address regional and country-specific threats. We are seeking a Regional Technical Lead DFIR to join our team in Riyadh, Saudi Arabia, for a full-time position. This role typically requires 5-10 years of experience.

Role Purpose and Focus

The Regional Technical Lead DFIR serves as the primary technical anchor and initial escalation point during complex cybersecurity incidents. This is a highly specialized, purely technical career path, focused on 24/7 technical excellence and cross-domain coordination. The role involves guiding the technical direction of the team, providing extensive quality assurance, and driving the skill development and professional growth of team members. It explicitly does not include team management, disciplinary leadership functions, or responsibility for the overarching strategic vision of DFIR teams.

Key Responsibilities

• Provide continuous 24/7 DFIR service, including weekend work, and conduct onsite client engagements in critical situations.
• Apply hands-on technical expertise in Windows, Linux, and Memory forensics.
• Lead the technical direction during high-stakes cybersecurity incidents and act as the initial escalation point for the team and clients.
• Support the team in resolving challenging, complex problems and make sound decisions with incomplete data, balancing analytical depth and response speed.
• Engage in academic research, encourage publication of papers, and stay updated with new technologies and modern methodologies, including emerging tech like LLMs in investigative workflows.
• Drive the skill development and professional growth of DFIR team members, offering research, speaking, and presenting advisory.
• Maintain deep-dive expertise in at least one specific forensics-related field and support Quality Assurance through technical document review, editing, and evaluations.
• Coordinate across different domains and cybersecurity disciplines, applying process and project management skills for efficient delivery.
• Support the Regional Head in project planning, specifically in defining project scope descriptions, and utilize strong social skills, including HUMINT, to foster collaboration.

Required Qualifications

• Strong knowledge of DFIR methodologies, tools, and industry standards.
• Demonstrated stakeholder management and interdepartmental collaboration skills.
• High-level decision-making skills in dynamic and high-pressure environments.
• Proficiency in process management, including process design and optimization.
• Advanced technical writing skills.

Preferred Skills and Experience

• Experience in intelligence tradecraft across cyber and other domains.
• A proven track record in academic research.

Working at Group-IB

Joining Group-IB means contributing directly to disrupting digital crime. The company investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies globally. Group-IB supports professional certifications at company expense, including CEH, CISSP, OSCP, and specialized forensics and penetration testing certifications. Employees work alongside industry leaders, contributing to technologies recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. The team is international, comprising individuals from diverse backgrounds united by a shared mission to fight cybercrime.