DFIR Manager
Connect-AI
Canada
The Role
This position involves leading complex incident response engagements from triage through containment and remediation, covering ransomware, business email compromise, insider threats and cloud compromises. The manager performs hands-on forensic analysis while acting as senior technical liaison to clients, legal counsel and executives.
Skills & Experience
Candidates need 6+ years of DFIR experience, strong endpoint, network and cloud forensics skills, and familiarity with EDR/XDR tools like CrowdStrike, SentinelOne or Defender, plus SIEM platforms, chain of custody practices and NIST incident response frameworks.
Who It Suits
Ideal for an experienced incident responder from a consulting or professional services background who wants to blend technical investigation with team mentorship, client leadership and broader strategic ownership.
Typical advertised salary for Incident Response roles in Canada: C$95,000–C$162,000 (median C$130,000 — from 55 recent listings analysed by Forensic Focus).
Learn More/Apply