Regional Technical Lead DFIR

About the role

The Regional Technical Lead DFIR will serve as the primary technical anchor for complex cybersecurity incidents across the region. Reporting to the Regional Head, the role focuses on 24/7 technical excellence, guiding incident response, and ensuring high‑quality forensic analysis without any people‑management responsibilities.

Key responsibilities

• Provide continuous 24/7 DFIR support, including weekend and on‑call duties.
• Conduct onsite engagements to assist clients during critical incidents.
• Perform hands‑on forensic investigations on Windows, Linux and memory images.
• Lead technical direction for incident handling, quality assurance and skill development of the team.
• Collaborate closely with the Regional Head and other security domains to coordinate response efforts.

Required profile

• Deep expertise in digital forensics and incident response.
• Ability to work in a high‑pressure, 24/7 environment.
• Strong technical authority without managerial duties.
• Excellent problem‑solving skills and attention to detail.

Required skills

• Windows forensics
• Linux forensics
• Memory analysis
• Incident response