Senior Cyber Incident Response Consultant (DFIR)
The Tech Recruiter
Ontario
The Role
This role leads high-impact cyber incident investigations, performing forensic analysis of hosts, networks and memory to determine attacker actions and impact. The consultant collects defensible evidence, briefs stakeholders, conducts readiness assessments and tabletop exercises, and participates in an on-call rota.
Skills & Experience
Requires advanced forensic skills across Windows, Linux, macOS and multi-cloud platforms, memory forensics, log and network traffic analysis, EDR/SIEM proficiency, Active Directory knowledge, chain-of-custody practices, and scripting for investigation automation.
Who It Suits
Ideal for an experienced DFIR professional comfortable leading investigations, mentoring junior staff, and engaging confidently with technical and executive stakeholders during high-pressure incidents.
Typical advertised salary for Incident Response roles in Canada: C$95,000–C$162,000 (median C$130,000 — from 55 recent listings analysed by Forensic Focus).
Learn More/Apply