Lead Service Manager – Incident Response Analyst
OpenText
Waterloo, Ontario
The Role
This senior position sits within a managed security services SOC and CSIRT function, leading incident response engagements across a multi-tenant client base. Day to day, the analyst delivers containment, investigation, and remediation for retainer clients, working independently under pressure while maintaining clear communication with client stakeholders.
Skills & Experience
The role requires a seasoned practitioner with hands-on experience in incident response, digital forensics, and threat containment within managed security environments. Familiarity with CSIRT and DFIR methodologies is essential, along with the ability to operate across SMB client environments and support retainer-based service commitments without disrupting ongoing detection operations.
Who It Suits
This position suits an experienced security professional who thrives in fast-paced, high-pressure environments and can work with confidence and autonomy. Those with a background in managed security services who enjoy direct client engagement and want to contribute to cutting-edge cybersecurity operations will find this role compelling.
Typical advertised salary for Incident Response roles in Canada: C$97,000–C$158,000 (median C$130,000 — from 40 recent listings analysed by Forensic Focus).
Learn More/Apply





