Senior Investigator - Digital Forensics & Incident Response
Toronto, 40 King St W., Corp, Canada
CAD 75K-125K Senior-level Full Time
Tasks
- Analyze logs
- Author client reports
- Conduct forensic analysis
- Create attack timelines
- Create automation scripts
- Derive attacker TTPs
- Detect anti forensics
- Develop indicators of compromise
- Develop remediation plans
- Lead investigation workstreams
- Mentor investigators
- Perform host forensics
- Perform memory forensics
- Perform network forensics
- Present technical findings
- Provide quality assurance on findings
- Recover encrypted artifacts
- Scope incident response engagements
- Support investigation strategy
- Threat hunt
- Triage malware
Perks/Benefits
- N/A
Skills/Tech-stack
AWS | Active Directory | Anti-forensics | Attack timelines | Automation | Azure | Bash | Behavior Analysis | Cloud Environments | Cloud Forensics | Deobfuscation | Digital forensics | EDR | Encrypted artifact recovery | GCP | Incident Response | Indicator of Compromise | Linux forensics | Log Analysis | MacOS forensics | Malware analysis | Malware unpacking | Memory Forensics | Network Forensics | OT/ICS | Powershell | Python | Reverse Engineering | Sandboxing | Scripting | Threat Analysis | Threat Intelligence | Threat hunting | Windows forensics
Education
N/A
Related jobs
-
Accreditation | Assessment and Authorization | Case Development | Data Analysis | Penetration TestingSenior-level Full TimeGatineau, QC1d ago
-
Active Directory | EDR | Entra ID | Incident Response | LinuxOn-site work schedule | Training and development opportunities | Vacation time | Work-life balanceSenior-level Full TimeOttawa, ON, Canada1d ago
-
AWS Security | Cloud Security | Detection and Response | Digital forensics | EDRAnnual leave | Benefits stipend | Hybrid work | Public holidaysSenior-level Full TimeToronto, Ontario, Canada1d ago
-
Ansible | BGP | CI/CD | CVEs | Catalyst CenterFlexible work hours | Mentorship | Remote workSenior-level Full TimeRemote, Canada R2d ago
-
Security Analyst, M365/Azure Cloud CAD 100K-115KAccess Control | Access policies | Azure | Azure CLI | Azure TenantCareer Development Learning Platforms | Educational assistance | Emergency travel insurance | Employee assistance program | Flexible time offMid-level Full TimeOttawa, ON, Canada2d ago
-
AI Governance | Access Management | Application Security | Business Continuity | Cloud ComputingFull-time hours | Hybrid work arrangement | Potential for permanent employmentMid-level ContractToronto, Canada2d ago
-
AI Act | AI Governance | Access Management | Application Security | Architecture ReviewsHybrid work arrangement | Potential permanent employment | Training and stakeholder enablementMid-level ContractWaterloo, Canada2d ago
-
Analyste Senior SecOps CAD 104K-130KAmazon Web Services | Azure | CIS Controls | CISA KEV | ContainerizationEmployee assistance program | Hybrid work | Paid time off | TelemedicineSenior-level Full TimeMontréal, Canada2d ago
-
Access Management | Active Directory | Apache | Application Security | AzureDental benefits | Health benefits | On-site work | Paid time offSenior-level Full TimeRichmond Hill, Ontario, Canada2d ago
-
Sr. Analyst, Falcon Complete (Remote, CAN) CAD 125K-200K.NET | Analysis tools | C# | Computer forensics | Digital forensicsEmployee networks | Flexible schedule | Hybrid schedule | Neighborhood Groups | Paid parental leaveSenior-level Full TimeCAN ON Remote, Canada R2d ago
-
It Security Analyst CAD 63K-71KAccess Review | Alert triage | Asset Inventory | Asset Inventory Management | Audit SupportAccommodations during selection process | Flexible schedule | Inclusive hiring | Support for 247 operationsMid-level Full TimeFallsview Casino, Canada2d ago
-
AWS IAM | Access Management | Account Management | Active Directory | Azure Active DirectoryRemote workMid-level ContractMontreal; Remote; Vancouver; Calgary; Winnipeg; Edmonton; … R3d ago
-
API Security | AWS | Access Management | Application Security | AzureSenior-level ContractToronto; Vancouver; Ottawa; Markham; Mississauga; Montreal3d ago
-
By Design | Cause analysis | Cloud Security | Defense in Depth | GCPDental insurance | Flexible vacation policy | Flexible work hours | Fully remote work environment | Health insuranceSenior-level Full TimeCanada R3d ago
-
Cyber Threat Analyst CAD 73K-122KAdversary TTPs | Cyber Threat | Cyber Threat Intelligence | Cybersecurity | Data AnalysisHealth and dental coverage | Health spending account | Hybrid remote/office environment | Life insurance | Mental health coverageMid-level Full TimeToronto, ON, CAN3d ago
-
Cybersecurity Student CAD 42K-62KDevice Management | Incident Management | IoT Device Management | LAN | LinuxCareer development | Employee share purchase offering | Retirement plan matching | Supportive work environment | Wellness programsEntry-level Full TimeEdmonton, AB, CA3d ago
-
Mid-level Full TimeToronto, Ontario, Canada4d ago
-
Security Analyst, M365/Azure Cloud CAD 100K-115KAccess Control | Active Directory | Azure | Azure Active Directory | Azure CLI24/7 virtual care | Defined contribution pension plan | Educational assistance | Emergency travel insurance | Employee assistance programEntry-level Full TimeOttawa, ON, Canada4d ago
-
Security Accreditation Manager CAD 194K-199KArtificial Intelligence | Automation | Control Profiles | Control mapping | Evidence collectionSenior-level Full TimeOttawa, ON, Canada4d ago
-
Senior Cyber Security Analyst CAD 100K-135KAWS | Access Management | Application Security | Azure | CCPAEmployee Assistance Program (EAP) | Employee share purchase plan | Employee wellbeing support | Life insurance | Long-term disabilitySenior-level Full TimeCalgary, Alberta, Canada5d ago
-
Audit Support | Business Continuity | COBIT | Crisis management | Crisis simulationCareer development | Group insurance plans | Hybrid work model | Paid family leave | Pension plansSenior-level Full TimeMontreal, Canada5d ago
-
Lead, Cybersecurity Incident Response CAD 119K-169KAWS | Automation and response | Azure | Cause analysis | Chain of CustodyCareer development | Education reimbursement | Employee discounts | Employee recognition program | Employee resource groupsSenior-level Full TimeToronto, ON, CA5d ago
-
Access Management | Application Security | Cybersecurity | DLP | Data Loss PreventionCollective retirement plan | Health insurance | Hybrid work environment | Paid time off | Professional developmentSenior-level Full TimeMontreal, Quebec, Canada5d ago
-
Security Platform Analyst CAD 84K-138KAWS Secrets | AWS Secrets Manager | Application Security | CSIRT | Cloud SecurityHybrid work flexibility | Wellness programsMid-level Full TimeSun Life Toronto Atria, Canada R5d ago
-
Security Platform Analyst CAD 84K-138KAWS Secrets | AWS Secrets Manager | Application Security | Cloud Security | CrowdStrikeHybrid work | Wellness programsMid-level Full TimeSun Life Toronto Atria, Canada R5d ago