[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Fortinet jobs](https://jobs.opennash.com/companies/fortinet/) · [Search jobs](/search/) Fortinet · Kuwait City, Kuwait # Lead Consultant - FortiGuard Incident Response - Kuwait Kuwait City, Kuwait Hybrid Manager or lead Consulting Listed on Fortinet’s official careers site. Posted May 15, 2026. Check that it is still open and apply there. [Apply on Fortinet’s careers site →](https://edel.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_2001/job/22923) [OpenNash Jobs](https://jobs.opennash.com/) / [Fortinet](https://jobs.opennash.com/companies/fortinet/) / Lead Consultant - FortiGuard Incident Response - Kuwait ## Job description We are looking for a Lead Consultant – FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors’ TTPs. In this very hands-on customer facing role the consultant’s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors’ tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines. ### Responsibilities Lead IR engagements and mentoring/training junior analysts Serve as the primary contact for clients during investigations, delivering clear technical and executive-level updates. Continue to focus on process improvement for the customer facing incident response services - Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems - Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats - Perform memory forensics and file analysis as needed - Contribute to threat intelligence consumption and generation within the FortiGuard threat intelligence ecosystem. - Perform basic reverse engineering of threat actors’ malicious tools - Develop complete and informative reports and presentations for both executive and technical audience Availability during nights/weekends as needed for IR engagements Required Skills: Excellent written and verbal communication skills Experience interfacing with customers Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc - Ability to data mine using YARA, RegEx or other techniques to identify new threats Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism - Strong knowledge of operating system internals and endpoint security experience. Able to communicate with both technical and executive personnel Static and dynamics malware and log analysis Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required. Highly motivated, self-driven and able to work both independently and within a team Able to work under pressure in time critical situations and occasional nights and weekends work A solid understanding of Active Directory and how to secure is a plus Education: Bachelor’s Degree in Computer Engineering, Computer Science or related field Or 10+ years’ experience with incident response and or Forensics ## At a glance - Posted by the employer: May 15, 2026 - First seen by OpenNash: Jul 11, 2026 - Last checked: Oct 18, 2026 - Listed for: 156 days - Location: Kuwait City, Kuwait - Work arrangement: Hybrid[Apply on Fortinet’s careers site →](https://edel.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_2001/job/22923) ## More jobs at Fortinet ### [Senior Security Consultant - FortiGuard Proactive Services - Kuwait](https://jobs.opennash.com/companies/fortinet/jobs/9d1a6e539efe8ccae5e0/) Kuwait City, Kuwait ### [Systems Engineer - Kuwait](https://jobs.opennash.com/companies/fortinet/jobs/eb4426f8af9724b5eb32/) Kuwait City, Kuwait ### [Systems Engineer - OT](https://jobs.opennash.com/companies/fortinet/jobs/56c74c80b9bb5b23d395/) Kuwait City, Kuwait ### [Consulting Systems Engineer](https://jobs.opennash.com/companies/fortinet/jobs/f14037572eb353299b9c/) Ecuador ### [Consulting Systems Engineer](https://jobs.opennash.com/companies/fortinet/jobs/c6b361ebc8310f7c480e/) Mexico City, CDMX, Mexico ## Similar jobs at other companies ### [Senior Digital Forensics and Incident Response Consultant (w/m/x)](https://jobs.opennash.com/companies/ntt/jobs/2802a42d97991e615600/) NTT · Erfurt, Germany ### [Incident Response Analyst](https://jobs.opennash.com/companies/ntt/jobs/e69a7ade261a569584db/) NTT · Buenos Aires, Argentina ### [Cybersecurity Incident Response Lead](https://jobs.opennash.com/companies/microsoft/jobs/0a5610e1958c0d34e891/) Microsoft · Singapore ### [Webber - Incident Response Technician - Infrastructure Management](https://jobs.opennash.com/companies/ferrovial/jobs/03ed257066c6a2c42ae0/) Ferrovial · Burlington, ON ### [Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response, AWS Incident Detection and Response](https://jobs.opennash.com/companies/amazon/jobs/77560fb02822e4df347e/) Amazon · ZA, Cape Town OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)