Digital Forensics Jobs: Canada
48 current openings, updated daily. Links to original listings.
Senior Incident Response Security Consultant, Mandiant, Google Cloud
Alberta
Join a world-renowned incident response team investigating complex, high-profile breaches. Responsibilities include forensic analysis, threat hunting, malware triage, containment, and crisis management for clients across sectors, with up to 30% travel.
View JobConsultant principal en sécurité en matière d’intervention en cas d’incident, Mandiant, Google Cloud
British Columbia
Senior IR consultant role with Mandiant's Google Cloud practice, handling complex security incident investigations, containment and recovery, with a focus on forensic analysis, threat hunting and malware triage for high-profile clients across Canada.
View JobDigital Forensic Investigator
Grande Prairie Police Service
Grande Prairie, Alberta
Join a municipal police service to collect, preserve, examine and analyse digital evidence across computers, mobile devices, networks and cloud systems, supporting criminal investigations and providing expert witness testimony in court.
View JobConsultant principal en sécurité en matière d’intervention en cas d’incident, Mandiant, Google Cloud
New Brunswick
Senior IR consultant role with Mandiant delivering end-to-end incident response, forensic analysis, malware triage and crisis management for complex, high-profile security incidents across cloud and on-premises environments.
View JobSenior Incident Response Consultant 2
Sophos
Canada
Lead complex incident response engagements for global clients, conducting forensic investigations, root cause analysis, threat neutralisation, and producing executive reports mapped to the MITRE ATT&CK framework. Coordinate with legal counsel and cyber insurers.
View JobSr. Cyber Consultant, DFIR
LevelBlue
Canada
Join a global DFIR team leading cybersecurity incident investigations, conducting digital forensic examinations across endpoints, networks and cloud platforms, and delivering clear, narrative-driven reports to technical and non-technical stakeholders.
View JobIncident Response Commander/Forensic Analyst
IstroSec
Urban agglomeration of Montreal, Quebec
A hybrid IR Commander and Forensic Analyst contractor role covering live incident triage, endpoint and memory forensics, threat hunting, attack kill-chain reconstruction, client coordination, and post-incident reporting for client organisations.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
New Brunswick
Join Mandiant's incident response team to investigate and contain complex cyber incidents. Work involves forensic analysis, threat hunting, malware triage, and advising clients through high-profile breaches across cloud and on-premises environments.
View JobSenior Digital Forensics Examiner – ITS5
Minnesota Direct Care and Treatment
St.-Paul, New Brunswick
Senior examiner role within a government digital forensics laboratory, handling complex internal and security investigations from evidence acquisition through to reporting, while mentoring junior staff and developing lab procedures and processes.
View JobStream 1 – Digital Evidence Specialist / Stream 2 – Digital Evidence Specialist Supervisor
Government of Canada
Montréal, QC
Join the RCMP's Digital Forensics Services unit in Montréal as a Digital Evidence Specialist or Supervisor. Examine and analyse digital evidence in support of criminal investigations, with opportunities at both specialist and supervisory levels.
View JobIncident Response Security Consultant, Mandiant (English)
Québec, Quebec
Join Mandiant's incident response team to investigate and contain complex security incidents. Responsibilities include host and network forensics, malware triage, threat hunting, and communicating findings to technical and executive stakeholders across Canada.
View JobSenior Forward Deployed Detection and Response Consultant, Cyber Defence, National Security, Mandiant
Ottawa, Ontario
Embed with Canada's national security and defence clients to lead incident response, forensic analysis, threat hunting, and malware triage, while designing agentic AI solutions to enhance detection and remediation capabilities at scale.
View JobForensisch IT Rechercheur
Nederlandse Voedsel en Warenautoriteit - NVWA
Newfoundland and Labrador
Digital forensics investigator role within a criminal investigation team, responsible for securing digital evidence from diverse devices and networks, advising investigators, coordinating digital operations during searches, and producing court-admissible forensic reports.
View JobConsultant en sécurité en matière de réponse aux incidents, Mandiant (anglais)
Québec, Quebec
Mandiant IR consultant role requiring end-to-end incident investigation, containment and remediation. Responsibilities include forensic analysis (disk, memory, network, cloud), malware triage, threat hunting and crisis management for complex, high-profile client engagements.
View JobIncident Response Security Consultant, Mandiant (English)
British Columbia
Join Mandiant's incident response team to investigate complex security breaches, conduct host and network forensics, malware triage, and threat hunting, helping clients detect, contain, and remediate cyber incidents at scale.
View JobEnquêteur
Autorité des marchés financiers (Québec)
Montreal, Quebec
Digital forensics investigator role within a financial regulatory authority, responsible for collecting, preserving and analysing digital evidence, conducting computer searches, supporting OSINT and eDiscovery activities, and testifying in legal proceedings.
View JobIncident Response Senior Consultant
Jobgether
Canada
Senior IR consultant role leading complex cybersecurity investigations across host, network, and cloud environments. Responsibilities include forensic analysis, threat hunting, malware investigation, remediation planning, and communicating findings to executive and legal stakeholders.
View JobIncident Response Senior Consultant (Remote, CAN)
CrowdStrike
Toronto
Lead incident response engagements and intrusion investigations for global organisations, conducting host and network forensics across Windows, Mac and Linux, performing malware analysis, and delivering findings to senior stakeholders.
View JobConsulting Associate/Recovery Services (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Hands-on forensic analyst and incident responder executing digital forensic collections, ransomware recovery, BEC investigations, and identity remediation across Windows, Linux, cloud, and virtualised enterprise environments for a global consulting firm.
View JobAssociate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Join a forensic services consulting practice supporting fraud, breach and misconduct investigations. Conduct digital forensic analysis, incident response, malware analysis and threat hunting, and assist in drafting expert forensic reports and testimony for clients and counsel.
View JobConsulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Toronto, Ontario
Senior consulting director leading technical breach response teams and delivering expert DFIR guidance to clients across industries. Requires 10+ years hands-on experience with forensic tools, threat landscape knowledge, and strong client relationship management.
View JobSecurity Specialist – Incident Commander (DFIR)
Ubisoft
Montréal, QC
Lead response to high-severity cybersecurity incidents across global infrastructure, conducting digital forensic investigations, threat hunting, and coordinating cross-functional teams. Improve IR processes, mentor SOC staff, and deliver post-incident reporting to technical and executive stakeholders.
View JobSenior Specialist, Incident Response | Spécialiste principal, Réponse aux incidents
SITA Switzerland Sarl
Montréal, QC
Senior DFIR specialist role conducting forensic investigations across endpoints, servers, cloud and SaaS environments, managing incident response lifecycles, analysing malware and ransomware artefacts, and enhancing forensic readiness within a global aviation IT security team.
View JobSenior DFIR Specialist
Malleum
Remote
Lead and deliver digital forensics and incident response engagements across endpoint, network, cloud, and hybrid environments. Investigate ransomware, intrusions, and insider threats while helping shape a growing DFIR practice and mentoring junior practitioners.
View JobIncident Response Analyst, Digital Forensics & Incident Response
ISA Cybersecurity
Toronto, ON
Hands-on DFIR analyst role supporting incident response engagements across endpoint, network, and cloud environments. Responsibilities include forensic acquisition, evidence analysis, timeline reconstruction, report writing, and playbook development under an Incident Commander.
View JobCybersecurity Incident Response Commander
ISA Cybersecurity
Toronto, ON
Serves as Incident Commander for all IR retainer and emergency engagements, leading digital forensic investigations across endpoint, network, mobile and cloud sources, developing DFIR playbooks, and presenting evidence reports to legal and client stakeholders.
View JobIncident Response Security Consultant, Mandiant (English)
Nova Scotia
Provide incident response and forensic consulting to clients navigating complex breaches. Conduct host and network forensics, malware triage, threat hunting, and support investigation, containment, and remediation across diverse environments.
View JobSecurity Specialist – Incident Commander (DFIR)
Ubisoft
Montreal, Quebec
Lead response to high-severity cybersecurity incidents across global gaming infrastructure, conducting digital forensic investigations, threat hunting, and coordinating across security, legal, and production teams using tools like Velociraptor, Splunk, and CrowdStrike.
View JobLead Service Manager – Incident Response Analyst
OpenText
Waterloo, Ontario
Senior IR practitioner leading incident response retainer engagements across a managed security client base. Responsibilities include forensic investigations, containment, root cause analysis, evidence handling, and mentoring SOC analysts across cloud and on-prem environments.
View JobIncident Response Security Consultant, Mandiant (English)
Alberta
Join Mandiant's incident response team to investigate and contain cyber incidents, conduct host and network forensics, perform malware triage, threat hunting, and communicate findings to clients across complex, high-profile engagements.
View JobDigital Forensic Analyst II
District of Saanich
Victoria, British Columbia
Join a municipal police department as a digital forensic specialist responsible for collecting, preserving and analysing digital evidence, forensic video analysis, facial comparison, court testimony, and supporting complex criminal investigations.
View JobSpécialiste de la sécurité – Responsable de la gestion des incidents de cybersécurité (analyse forensique)
Ubisoft
Montreal, Quebec
Leads cybersecurity incident response and digital forensic investigations across a global gaming infrastructure, conducting memory, disk and network forensics using tools such as Velociraptor and Autopsy, while coordinating multi-team response and threat hunting.
View JobIncident Response Lead
CyberClan
Canada
Lead end-to-end incident response operations within a global CERT/DFIR team, managing detection, containment, forensic analysis, and remediation. Oversee IR planning, mentor staff, drive tooling development, and coordinate cross-functional teams during security incidents.
View Job(2027 Bachelor’s/Master’s graduates) Cyber & Forensic Technology Consulting Analyst/Associate
Charles River Associates
Toronto, Ontario
Entry-level consulting role supporting digital forensic investigations, incident response, and cyber due diligence. Responsibilities include evidence collection, forensic analysis of devices and networks, malware analysis, report drafting, and tool development for litigation and security matters.
View JobSenior Digital Forensic Investigator
eSentire
Canada
Lead complex cyber investigations spanning data breaches, ransomware and espionage cases. Conduct digital forensics and incident response engagements, mentor junior staff, and deliver court-ready investigative conclusions across cloud and on-premise environments.
View JobSenior DFIR Specialist
Malleum
Ottawa, Ontario
Lead and deliver hands-on digital forensics and incident response engagements across enterprise and cloud environments, investigating ransomware, intrusions, and insider threats while shaping the firm's DFIR methodology, tooling, and delivery standards.
View JobIncident Response Lead
CGI
Toronto, Ontario
Senior role leading technical cybersecurity incident response within a 24/7 global SOC. Responsibilities include digital forensic investigations, malware analysis, containment and recovery, playbook development, and mentoring junior analysts across enterprise and cloud environments.
View JobChef de file de la réponse aux incidents
CGI
Toronto, ON
Lead technical cybersecurity incident response within a global SOC, conducting advanced forensic investigations across endpoints, networks and cloud environments, developing IR playbooks, mentoring staff and managing high-impact incidents 24/7.
View JobSenior Consultant, Digital Forensics
MNP
Calgary, AB
Senior consultant role delivering digital forensic investigations, fraud inquiries, and litigation support. Responsibilities include forensic imaging, artifact analysis, eDiscovery, and leading engagement teams on complex regulatory and civil matters across Canada.
View JobDirector, Global Head – Digital Forensic Services
Scotiabank
Toronto, Ontario
Lead a global digital forensics and eDiscovery team across multiple regions, overseeing forensic examinations, evidence management, cyber-enabled crime investigations, litigation support, and expert witness testimony for a major financial institution.
View JobForensic Analyst
Fortinet
Vancouver, BC
Join a forensics team conducting in-depth digital forensics investigations on Windows, Linux, and macOS systems, performing malware analysis, reverse engineering, threat intelligence research, and communicating findings to internal and external stakeholders.
View JobSenior Investigator – Digital Forensics & Incident Response
Accenture
Toronto, Ontario
Senior DFIR investigator role delivering complex forensic analysis, memory forensics, malware triage, threat hunting and incident response across cloud, OT and enterprise environments, mentoring junior investigators and authoring client reports.
View JobPrincipal Consultant, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Calgary, Alberta
Lead complex incident response and digital forensics engagements for enterprise clients, performing host-based analysis, breach investigations, and log examination using industry-standard tools, while mentoring junior staff and advising on remediation.
View JobAssociate Principal/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Senior forensic consulting role leading cyber intrusion investigations, incident response, malware analysis, and digital forensics engagements for corporate clients, while driving business development and managing a cross-functional forensic investigations team.
View JobPrincipal Consultant, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Toronto, Ontario
Lead incident response engagements and forensic investigations across Windows, Linux, and macOS environments. Analyse logs, investigate data breaches using tools like EnCase and FTK, mentor junior staff, and deliver remediation recommendations to clients.
View JobSenior Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Senior forensic consultant role conducting cyber intrusion investigations, incident response, malware analysis, and digital forensics for corporate clients. Involves team leadership, business development, and cybersecurity framework assessments within a global consulting firm.
View JobConsulting Associate/Cybersecurity & Incident Response (Forensic Services practice)
Charles River Associates
Toronto, Ontario
Join a forensic services practice conducting cybercrime investigations, digital forensics, incident response, malware analysis, and threat intelligence. Support clients and counsel through data breaches, fraud matters, and expert reporting, requiring 3–5 years' experience.
View JobManager, Cyber Defence
KPMG Canada
Toronto, Ontario
Manager-level role leading incident response and digital forensics engagements for clients, performing evidence collection, malware analysis, log analysis, and IOC identification, while advising on remediation and contributing to practice development.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.