Regional Head of DFIR at GROUPIB GLOBAL PRIVATE LIMITED

Riyadh, Riyadh Region, Saudi Arabia -

Full Time

Start Date

Immediate

Expiry Date

24 Jun, 26

Salary

0.0

Posted On

26 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Digital Forensics, Incident Response, Team Leadership, Process Design, KPI Definition, Resource Allocation, Stakeholder Management, Budget Planning, Threat Intelligence, Red Teaming, Investigations, SOC Operations, Thought Leadership, Process Optimization, Intelligence Tradecraft, Public Speaking

Industry

Computer and Network Security

Description

ABOUT GROUP-IB: Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations. Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities. Each of us can help make the world a safer place. Join us! ABOUT THE ROLE: The META Head of DFIR Practice will lead the development and execution of Digital Forensics and Incident Response (DFIR) initiatives. This role involves overseeing incident response cases, managing a growing team, and ensuring efficient operations aligned with both regional and global standards. The position offers significant independence in defining key metrics, operational processes, and methodologies while working in close collaboration with other business units including SOC, Threat Intelligence, Investigations, Red Teaming, and EDR Development. YOUR MISSION: Strategic & Operational Leadership * Design and implement DFIR workflows, engagement strategies, and best practices specific to the META market. * Establish and refine rules of engagement, ensuring consistency across global DFIR teams. * Define and monitor key performance indicators (KPI) including incident response retainer (IRR), case volume, and billable hours with the flexibility to introduce additional relevant metrics. * Oversee the handling of major incident response cases and resource allocation. Team Leadership & Development * Build and manage a high-performing DFIR team in the META region, ensuring team members have clear roles and responsibilities. * Develop and sustain a knowledge-sharing culture, encouraging collaboration and professional growth. * Ensure effective resource utilization * Lead the hiring process for new DFIR team members, defining role requirements, participating in candidate selection, and ensuring smooth onboarding. Cross-functional & Market Collaboration * Strengthen relationships with internal teams including SOC, Threat Intelligence, Investigations, and Red Teaming. * Promote joint research, consulting initiatives, and knowledge-sharing efforts. * Drive thought leadership through public research and contributions to the industry. Leadership & Decision-Making * Take initiative in shaping the strategic direction of DFIR operations and contribute to regional coordination efforts. * Work closely with the Director of Services, Sales, and Pre-Sales teams to ensure alignment of business goals and service offerings. Budget, tools & Resource Allocation * Develop the DFIR budget for tools, training, certifications, and travel, subject to negotiation with the Global Head of DFIR Practice and CRO. * Identify and implement appropriate DFIR tools while aligning with global technology choices where possible. * Support continuous professional development of team members through certifications and training opportunities WHAT SUCCESS LOOKS LIKE: * Extensive experience in DFIR including leadership roles in cybersecurity organizations. * Proven ability to scale teams, optimize operations, and deliver exceptional incident response services. * Strong knowledge of DFIR methodologies, tools, and industry standards. * Experience in budget planning and effective resource allocation. * Ability to define, track, and drive performance metrics. * Strong stakeholder management and interdepartmental collaboration skills. * High-level decision-making skills in dynamic and high-pressure environments. * Proficiency in process management including process design and optimization. * Experience in public speaking and publication of DFIR-related findings is an advantage. * Experience in intelligence tradecraft across cyber and other domains is highly desirable * A proven track record in academic research is preferred. PERFORMANCE & SUCCESS METRICS: * Growth in DFIR team size and case volume. * Achievement of revenue and margin targets. * Reduction in case declines. * Active involvement in high-profile incident response engagements. * Consistently positive client feedback. * Regular publication of DFIR research and findings. OUR WORK ENVIRONMENT & CULTURE: At Group-IB, we believe that employee happiness is fundamental to success. We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow. Whether you’re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development. Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges. You’ll be working with cutting-edge technologies recognized globally by Gartner, IDC, and Forrester, and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients. We take pride in our multicultural, values-driven culture—where mutual respect, collaboration, and shared goals unite us across borders. And with Group-IB’s continued global growth and financial stability, your career trajectory here can accelerate faster than in most traditional environments. WHAT DO WE OFFER: * Flexible Work Schedule * We don’t believe in fixed hours—what matters is impact, not time spent. You have the freedom to design your own workday in a way that drives results and balance. * Comprehensive Health Coverage * Your well-being comes first. We offer health insurance to support you when it matters most. * Certifications & Continuous Learning * Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development—because your growth fuels our innovation. * Meaningful Challenges & Growth Paths * From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set—and earn recognition and rewards along the way. * Entrepreneurial spirit is encouraged * We value initiative. Whether it’s launching a tech blog, organizing events, building communities, or starting a sports team—Group-IB is a place where bold ideas are supported and celebrated.

Responsibilities

The META Head of DFIR Practice will lead the development and execution of Digital Forensics and Incident Response (DFIR) initiatives, overseeing incident response cases and managing a growing team to ensure efficient operations aligned with regional and global standards. This involves designing DFIR workflows, establishing rules of engagement, defining key performance indicators, and overseeing major incident response cases and resource allocation.