Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

← All jobs

Digital Forensics Jobs: Canada

38 current openings, updated daily. Links to original listings.

Reset

Video Analyst

Halton Regional Police Service

Oakville, Ontario

Onsite · Mid · Temporary

Temporary full-time role analysing and processing video and multimedia evidence for criminal investigations, using forensic software to enhance footage, maintain evidence continuity, and provide expert court testimony.

View Job

Enquêteur principal, informatique judiciaire; enquêteuse principale, informatique judiciaire

Ontario Finance | Ontario Finances

Oshawa, Ontario

Onsite · Lead/Principal · Full-time

Lead a team of digital forensic investigators handling complex fraud and tax-related investigations, executing search warrants, mentoring staff, and supporting prosecutions across the province.

View Job

Senior Computer Forensic Investigator

Ontario Finance | Ontario Finances

Oshawa, Ontario

Onsite · Senior · Full-time

Lead a team of computer forensic investigators conducting complex digital forensic examinations supporting tax compliance and fraud investigations, mentoring staff, executing search warrants, and ensuring defensible evidence handling across provincial cases.

View Job

DFIR Manager

Connect-AI

Canada

Remote · Manager · Full-time

Lead high-severity cyber incidents end-to-end while staying hands-on technically, overseeing endpoint, network and cloud forensic investigations, mentoring analysts, and advising clients through ransomware, BEC and breach engagements.

View Job

Senior Cyber Incident Response Consultant (DFIR)

The Tech Recruiter

Ontario

Remote · Senior · Full-time · CA$180,000.00/yr - CA$207,000.00/yr

Lead complex cyber incident investigations, performing advanced forensics across Windows, Linux, macOS and cloud environments, while advising clients, mentoring junior analysts, and strengthening organisational incident response readiness.

View Job

Conseiller en DFIR – Intermédiaire

OKIOK Data ltd

Laval, Quebec

Onsite · Mid · Full-time

Mid-level DFIR consultant needed to respond to cyber incidents, conduct forensic investigations across endpoints and networks, and deliver technical reports, working closely with SOC and IT teams.

View Job

Senior Incident Response Security Consultant, Mandiant, Google Cloud

Google

Ontario

Remote · Senior · Full-time

Join a world-renowned incident response team investigating complex, high-profile cyber breaches. Responsibilities span forensic analysis, threat hunting, malware triage, containment, and remediation, supporting clients across technically demanding security incidents.

View Job

DFIR Manager

Groom & Associés / Associates

Canada

Manager · Full-time · $160,000.00/yr - $175,000.00/yr

Lead a global Security Incident Response function, overseeing forensic investigations, incident resolution, and remediation. Mentor analysts, manage IR tooling and KPIs, and serve as technical authority during security incidents in a 24x7 environment.

View Job

Senior Incident Response Security Consultant, Mandiant, Google Cloud

Google

Alberta

Remote · Senior · Full-time

Join a world-renowned incident response team investigating complex, high-profile breaches. Responsibilities include forensic analysis, threat hunting, malware triage, containment, and crisis management for clients across sectors, with up to 30% travel.

View Job

Consultant principal en sécurité en matière d’intervention en cas d’incident, Mandiant, Google Cloud

Google

British Columbia

Remote · Senior · Full-time

Senior IR consultant role with Mandiant's Google Cloud practice, handling complex security incident investigations, containment and recovery, with a focus on forensic analysis, threat hunting and malware triage for high-profile clients across Canada.

View Job

Digital Forensic Investigator

Grande Prairie Police Service

Grande Prairie, Alberta

Onsite · Mid · Full-time

Join a municipal police service to collect, preserve, examine and analyse digital evidence across computers, mobile devices, networks and cloud systems, supporting criminal investigations and providing expert witness testimony in court.

View Job

Consultant principal en sécurité en matière d’intervention en cas d’incident, Mandiant, Google Cloud

Google

New Brunswick

Remote · Senior · Full-time

Senior IR consultant role with Mandiant delivering end-to-end incident response, forensic analysis, malware triage and crisis management for complex, high-profile security incidents across cloud and on-premises environments.

View Job

Senior Incident Response Consultant 2

Sophos

Canada

Senior · Full-time

Lead complex incident response engagements for global clients, conducting forensic investigations, root cause analysis, threat neutralisation, and producing executive reports mapped to the MITRE ATT&CK framework. Coordinate with legal counsel and cyber insurers.

View Job

Sr. Cyber Consultant, DFIR

LevelBlue

Canada

Senior · Full-time

Join a global DFIR team leading cybersecurity incident investigations, conducting digital forensic examinations across endpoints, networks and cloud platforms, and delivering clear, narrative-driven reports to technical and non-technical stakeholders.

View Job

Expert en cybersécurité/Experte en cybersécurité

Victrix

Quebec

Remote · Lead/Principal · Full-time

Lead a SOC threat-hunting and investigation team, directing advanced threat-hunting campaigns, complex incident investigations, vulnerability management and continuous penetration testing to improve detection and client security outcomes.

View Job

Senior Incident Response Security Consultant, Mandiant, Google Cloud

Google

New Brunswick

Remote · Senior · Full-time

Join Mandiant's incident response team to investigate and contain complex cyber incidents. Work involves forensic analysis, threat hunting, malware triage, and advising clients through high-profile breaches across cloud and on-premises environments.

View Job

Senior Forward Deployed Detection and Response Consultant, Cyber Defence, National Security, Mandiant

Google

Ottawa, Ontario

Onsite · Senior · Full-time

Embed with Canada's national security and defence clients to lead incident response, forensic analysis, threat hunting, and malware triage, while designing agentic AI solutions to enhance detection and remediation capabilities at scale.

View Job

Forensisch IT Rechercheur

Nederlandse Voedsel en Warenautoriteit - NVWA

Newfoundland and Labrador

Mid · Full-time

Digital forensics investigator role within a criminal investigation team, responsible for securing digital evidence from diverse devices and networks, advising investigators, coordinating digital operations during searches, and producing court-admissible forensic reports.

View Job

Consultant en sécurité en matière de réponse aux incidents, Mandiant (anglais)

Google

Québec, Quebec

Remote · Mid · Full-time

Mandiant IR consultant role requiring end-to-end incident investigation, containment and remediation. Responsibilities include forensic analysis (disk, memory, network, cloud), malware triage, threat hunting and crisis management for complex, high-profile client engagements.

View Job

Incident Response Security Consultant, Mandiant (English)

Google

British Columbia

Remote · Mid · Full-time

Join Mandiant's incident response team to investigate complex security breaches, conduct host and network forensics, malware triage, and threat hunting, helping clients detect, contain, and remediate cyber incidents at scale.

View Job

Consulting Associate/Recovery Services (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Mid · Internship

Hands-on forensic analyst and incident responder executing digital forensic collections, ransomware recovery, BEC investigations, and identity remediation across Windows, Linux, cloud, and virtualised enterprise environments for a global consulting firm.

View Job

Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Mid · Internship

Join a forensic services consulting practice supporting fraud, breach and misconduct investigations. Conduct digital forensic analysis, incident response, malware analysis and threat hunting, and assist in drafting expert forensic reports and testimony for clients and counsel.

View Job

Consulting Director, DFIR, Reactive Services (Unit 42)

Palo Alto Networks

Toronto, Ontario

Remote · Lead/Principal · Full-time

Senior consulting director leading technical breach response teams and delivering expert DFIR guidance to clients across industries. Requires 10+ years hands-on experience with forensic tools, threat landscape knowledge, and strong client relationship management.

View Job

Security Specialist – Incident Commander (DFIR)

Ubisoft

Montréal, QC

Onsite · Senior · Full-time

Lead response to high-severity cybersecurity incidents across global infrastructure, conducting digital forensic investigations, threat hunting, and coordinating cross-functional teams. Improve IR processes, mentor SOC staff, and deliver post-incident reporting to technical and executive stakeholders.

View Job

Incident Response Analyst, Digital Forensics & Incident Response

ISA Cybersecurity

Toronto, ON

Hybrid · Mid · Full-time · $75,000–$105,000 a year

Hands-on DFIR analyst role supporting incident response engagements across endpoint, network, and cloud environments. Responsibilities include forensic acquisition, evidence analysis, timeline reconstruction, report writing, and playbook development under an Incident Commander.

View Job

Cybersecurity Incident Response Commander

ISA Cybersecurity

Toronto, ON

Hybrid · Lead/Principal · Full-time · $135,000–$180,000 a year

Serves as Incident Commander for all IR retainer and emergency engagements, leading digital forensic investigations across endpoint, network, mobile and cloud sources, developing DFIR playbooks, and presenting evidence reports to legal and client stakeholders.

View Job

Incident Response Security Consultant, Mandiant (English)

Google

Nova Scotia

Remote · Mid · Full-time · $134,000–$137,000 a year

Provide incident response and forensic consulting to clients navigating complex breaches. Conduct host and network forensics, malware triage, threat hunting, and support investigation, containment, and remediation across diverse environments.

View Job

SOC Analyst, Tier III

Interac Corp.

Toronto, Ontario

Senior · Full-time · $90,000–$115,000 a year

Senior SOC analyst role leading complex incident response, digital forensic investigations, and proactive threat hunting across endpoints, cloud, and network environments, while driving detection engineering and cybersecurity strategy.

View Job

(2027 Bachelor’s/Master’s graduates) Cyber & Forensic Technology Consulting Analyst/Associate

Charles River Associates

Toronto, Ontario

Junior · Internship

Entry-level consulting role supporting digital forensic investigations, incident response, and cyber due diligence. Responsibilities include evidence collection, forensic analysis of devices and networks, malware analysis, report drafting, and tool development for litigation and security matters.

View Job

Senior Digital Forensic Investigator

eSentire

Canada

Hybrid · Senior · Full-time · CA$120,000.00/yr - CA$160,000.00/yr

Lead complex cyber investigations spanning data breaches, ransomware and espionage cases. Conduct digital forensics and incident response engagements, mentor junior staff, and deliver court-ready investigative conclusions across cloud and on-premise environments.

View Job

Senior Consultant, Digital Forensics

MNP

Calgary, AB

Hybrid · Senior · Permanent

Senior consultant role delivering digital forensic investigations, fraud inquiries, and litigation support. Responsibilities include forensic imaging, artifact analysis, eDiscovery, and leading engagement teams on complex regulatory and civil matters across Canada.

View Job

Senior Investigator – Digital Forensics & Incident Response

Accenture

Toronto, Ontario

Senior · Full-time · $75,400–$125,400 a year

Senior DFIR investigator role delivering complex forensic analysis, memory forensics, malware triage, threat hunting and incident response across cloud, OT and enterprise environments, mentoring junior investigators and authoring client reports.

View Job

Principal Consultant, DFIR, Reactive Services (Unit 42)

Palo Alto Networks

Calgary, Alberta

Remote · Lead/Principal · Full-time

Lead complex incident response and digital forensics engagements for enterprise clients, performing host-based analysis, breach investigations, and log examination using industry-standard tools, while mentoring junior staff and advising on remediation.

View Job

Associate Principal/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Lead/Principal · Internship

Senior forensic consulting role leading cyber intrusion investigations, incident response, malware analysis, and digital forensics engagements for corporate clients, while driving business development and managing a cross-functional forensic investigations team.

View Job

Principal Consultant, DFIR, Reactive Services (Unit 42)

Palo Alto Networks

Toronto, Ontario

Remote · Lead/Principal · Full-time

Lead incident response engagements and forensic investigations across Windows, Linux, and macOS environments. Analyse logs, investigate data breaches using tools like EnCase and FTK, mentor junior staff, and deliver remediation recommendations to clients.

View Job

Senior Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Senior · Internship

Senior forensic consultant role conducting cyber intrusion investigations, incident response, malware analysis, and digital forensics for corporate clients. Involves team leadership, business development, and cybersecurity framework assessments within a global consulting firm.

View Job

Consulting Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates

Toronto, Ontario

Mid · Internship

Join a forensic services practice conducting cybercrime investigations, digital forensics, incident response, malware analysis, and threat intelligence. Support clients and counsel through data breaches, fraud matters, and expert reporting, requiring 3–5 years' experience.

View Job

Manager, Cyber Defence

KPMG Canada

Toronto, Ontario

Manager · Full-time

Manager-level role leading incident response and digital forensics engagements for clients, performing evidence collection, malware analysis, log analysis, and IOC identification, while advising on remediation and contributing to practice development.

View Job