DFIR Manager
Groom & Associés / Associates
Canada
The Role
This role leads a high-performing DFIR function across global operations, managing the full incident lifecycle from triage and IOC identification through to post-breach remediation. Day-to-day responsibilities include coordinating cross-functional response teams, maintaining chain of custody during forensic investigations, reporting to senior leadership, and ensuring 24×7 operational readiness.
Skills & Experience
Candidates should bring deep expertise in incident response and digital forensics, including traffic analysis, packet captures, and IOC identification. Experience developing IR policies, managing DFIR tooling selection, and driving metrics-based performance is essential. Familiarity with legal and evidentiary standards and strong stakeholder communication skills are expected.
Who It Suits
This position suits an experienced DFIR professional ready to step into a leadership role within a fast-growing managed security services environment. Those who thrive in metrics-driven, collaborative cultures and enjoy both hands-on technical work and people management will find this role rewarding.
Typical advertised salary for Incident Response roles in Canada: C$95,000–C$162,000 (median C$130,000 — from 55 recent listings analysed by Forensic Focus).
Learn More/Apply