Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 7 hours ago
KC
SOC Analyst Level 2 - Cyber Security
KPMG Canada
Montreal, QC
- Full-time
Highly technical with at least 3 to 5 years of relevant experience as an analyst in Cyber, IT Security or a SOC
Added 17 hours ago
C
Cyber Security Analyst
Creyos
Toronto, ON
- $80,000 to $100,000 CAD / year
- Full-time
We are looking for a Cybersecurity Analyst to join our team to drive the implementation of compliance and information security initiatives, and ensure our business practices meet the…
Added 4 days ago
CC
SOC Analyst - Level 2/3 (6 positions)
Catamania Canada
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
Catamania is looking for a Level 2/3 SOC Analyst to join the Cyber Defense Center of a major international group.
Added 5 days ago
TG
Junior Cybersecurity Operations Analyst Intern
TMX Group
Toronto, ON
- $20 to $24 CAD / hour
- Full-time
Must Have(s)
Added 6 days ago
TC
Senior Cyber Security Analyst (Temporary)
Tru Cooperative Bank
Langley (District), BC · Langley, BC
- $76,800 to $98,400 CAD / year
- Temporary
The Senior Cyber Security Analyst is responsible for Level 2 and Level 3 SOC operations and assists peers, business stakeholders and executives in identifying risks that may impact Tru…
Added 7 days ago
A
Forensic Analyst II
Arete
Canada
- Full-time
Works with the Security Operations Center (SOC) to leverage data from monitoring and alerts provided by installed applications and deployed EDR solutions to identify Indicators of…
Added 8 days ago
K
SOC T3 Expert
Kyndryl
Barrie, ON
- Full-time
Must have or be eligible for Canadian Secret Clearance (Level II)
Added 17 days ago
IG
Cyber Security Analyst
Insight Global
Toronto, ON
- $50 to $63 CAD / hour
- Contract
3–5 years of experience working in Incident Response (IR) or SOC Level 2 within medium to large enterprises
Added 17 days ago
L3 SOC Analyst - Calgary
Integrity360
Calgary, AB
The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring that incidents are analysed in the correct business and technical…
Added 24 days ago
SOC Analyst, Junior
Long View Systems
Calgary, AB
We are looking for a driven and self-motivated Security Operations Centre Analyst for our Calgary team to help ensure the security, availability, and operational uptime of the tools used to…
Added 24 days ago
C
Security Operations Center Analyst
CYBERWELL
Calgary, AB · Greater Calgary Metropolitan Area
- Full-time
…cybersecurity brands – Source44, Seekintoo, Cycura, and Proack Security. Now under one banner, we’re scaling our impact with a fresh vision, a stronger portfolio, and a renewed commitment…
Added 27 days ago
KC
SOC Analyst Level 2 - Cyber Security
KPMG Canada
Toronto, ON
- Full-time
Highly technical with at least 3 to 5 years of relevant experience as an analyst in Cyber, IT Security or a SOC
Added 1 month ago
CP
Senior Incident Response Analyst
Check Point Software
Toronto, ON
- Full-time
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Added 1 month ago
CP
Senior Incident Response Analyst
Check Point Software
Montreal, QC
- Full-time
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Added 1 month ago
CP
Senior Incident Response Analyst
Check Point Software
Vancouver, BC
- Full-time
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Added 1 month ago
F
Cybersecurity Analyst / Analyste en cybersécurité
FENCECORE
Montreal, QC
- Full-time
Des certifications comme CompTIA Security+ ou CySA+, Blue Team Level 1, Microsoft SC-200 ou les certifications Sophos sont des atouts, pas des exigences.
Added 1 month ago
M
Principal M&A Analyst Cyber
McKesson
Mississauga, ON
- Full-time
McKesson is seeking a Principal M&A Analyst Cyber to support cybersecurity due diligence and risk assessment activities across mergers, acquisitions, divestitures, and strategic…
Added 1 month ago
V
Cybersecurity Analyst – Tier 2
Vanderlande
Vancouver, BC
- Full-time
24/7 SOC environment - day shift with weekend coverage
Added 1 month ago
C
Sr Analyst
CDW
Mississauga, ON
- Full-time
The Senior Analyst provides second-level technical client support such as: cyber security analysis of detected anomalies; deep analysis of the operating system; dealing with system crashes…
Added 1 month ago
BC
Senior MDR Analyst
Blackpoint Cyber
Remote, Canada
- $108,000 to $135,000 CAD / year
- Full-time
- Remote
This is a Monday through Friday day shift position
Added 1 month ago
IF
Security Analyst II - Pen Tests
Intact FC
Toronto, ON · Montreal, QC · Laval, QC · Vancouver, BC
- Full-time
Experience in a Security Operations Center (SOC) or Cyber Incident Response Team (CIRT), preferably in security monitoring and security incident response
Added 2 months ago
Security Compliance Analyst
Payments Canada
Toronto, ON · Ottawa, ON
Duties and Responsibilities of the Security Compliance Analyst will include but is not limited to:
Added 4 months ago
SI
Gestionnaire Principal - Cybersécurité & Gouvernance
Solotech Inc.
Montreal, QC
- Full-time
…opérations quotidiennes de sécurité et la mise en œuvre du programme cyber à l’échelle de l’organisation. Dans un contexte de croissance internationale et d’accélération des exigences de…
Added 3 months ago
PG
Data Security Analyst
Paymentus Group Inc
Richmond Hill, ON
- Full-time
Paymentus is seeking a Data Security Analyst to join our Cyber Security team with a focus on Data Loss Prevention (DLP). This role will support the day-to-day operation of the…
Added 5 months ago
M
SOC Tier 1 Analyst
MNP
Calgary, Alberta · Edmonton, Alberta · Montreal, Quebec
- Full-time
Make an impact with our Managed Security Services team as a SOC Tier 1 Analyst. This diverse team of tech-savvy problem solvers enables clients to take a proactive and prepared approach to…

Arete

Forensic Analyst II

Canada

Full-time

Apply on areteir.wd1.myworkdayjobs.com About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Nov 2, 2026

Original job description

ROLES & RESPONSIBILITIES

Performs and supports the team with digital forensic analysis on Windows, Apple Mac, and Linux based operating systems, in addition to the analysis of networking appliances including but not to, VPN and firewall appliances
Documents forensic findings in accordance with the standards set forth within the Arete Forensic Tracker and develop a master timeline and visual attack map of the events
Identifies additional sources (systems, logs, etc.) to collect based on the analysis and identify gaps based on the lifecycle of attack – mentors and teaches others
Works with the Security Operations Center (SOC) to leverage data from monitoring and alerts provided by installed applications and deployed EDR solutions to identify Indicators of Compromise (IOCs), Tactics, Techniques and Procedures (TTPs) for variants related to case
Reviews Forensics findings and delivers findings/updates to the team in a clear, concise manner through a narrative story outlining the timeline of events. Modifies delivery in-line with the call’s audience and technical capabilities
Assists the Senior Analyst and team with tracking and maintaining deliverable dates, reviewing and finalizing findings, updates, and reports
Tracks findings and captures data points related to investigations to enhance and inform our threat intelligence
Raises technical constraints and issues within the Forensics team to identify detail of the incident and escalate to Forensic leadership
Maintains updated case analyst notes, the Forensic tracker, timeline, and attack map for collaboration within the team in our centralized case location
Reviews and drafts detailed updates regarding investigative findings and conclusions drawn from analysis regarding the timing and mechanism of the initial intrusion, adversary actions, timeline of activity/lateral movement, and indicators of data access and/or exfiltration
Identifies, documents, and shares information such as critical IOCs or adversary TTP’s as they uncovered with the Incident Response, Threat Intel, and Security Operations teams
Communicates identified IOCs to the Tiger Team in furtherance of the investigation, path to restoration/response, and for bolstering of Client’s security posture
Employs the usage of incident-mapping frameworks such as MITRE’s ATT&CK and Lockheed Martin’s Cyber Kill Chain to help contextualize identified adversary actions/IOCs
Reviews and produces written incident, investigative updates and reports at the explicit direction of counsel partners
Communicates within the DFIR team and provides routine status updates within our case management platform
Works with cross-functional teams and collaborates to leverage threat intel TTPS/IOC's, information from our SOC/Threat Hunting team, and updates from our Negotiations teams to enhance the intelligence as part of the incident, while identifying patterns and trends based on the available data and correlating analysis with additional information
Reviews and drafts reports and appendices based on the findings using the standard report templates
Accurately track and record time for forensic analysis.
May perform other duties as assigned by management

SKILLS AND KNOWLEDGE

Deep understanding of Forensic artifacts, including (but not limited to) the analysis of operating system artifacts and the recovery of deleted items from multiple operating systems including Windows, Linux, Mac and RAM/memory forensics.
Experience analyzing network and operating system log files including Windows Event logs, Unified Audit Logs, Firewall logs, VPN logs, etc.
Ability to mentor and teach others.
General knowledge of:
- Windows disk and memory forensics
- Network Security Monitoring (NSM), network traffic analysis, and log analysis
- Unix or Linux disk and memory forensic
Experience and understanding of enterprise security controls
Experienced with EnCase, Axiom, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCP Dump, and other open-source forensic tools
Experience delivering technical findings to a non-technical audience, preferred
Experience leading project delivery and delivering engagements on time, preferred
Provide findings in a confident, factual manner, preferred
Knowledge and experience in handling PII, PHI, sensitive, confidential and proprietary datasets.
Experience with Cyber insurance investigations, preferred

JOB REQUIREMENTS

Associate’s degree and 6+ years of incident response or digital forensics experience or Bachelor's Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field and 2+ years related experience
Possess two or more of the following Certifications:
- Security +, Network+, SANS GCED, GCIH, GCFE, GCFA, CEH, CHFI.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities, duties and skills required personnel so classified.

WORK ENVIRONMENT

While performing the responsibilities of this position, the work environment characteristics listed below are representative of the environment the employee will encounter: Usual office working conditions. Reasonable accommodation may be made to enable people with disabilities to perform the essential functions of this job.

PHYSICAL DEMANDS

No physical exertion required
Travel within or outside of the state
Light work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force as frequently as needed to move objects

TERMS OF EMPLOYMENT

Salary and benefits shall be paid consistent with Arete salary and benefit policy.

FLSA OVERTIME CATEGORY

Job is exempt from the overtime provisions of the Fair Labor Standards Act.

DECLARATION

The Arete Incident Response Human Resources Department retains the sole right and discretion to make changes to this job description.

EQUAL EMPLOYMENT OPPORTUNITY

We’re proud to be an equal opportunity employer- and celebrate our employees’ differences, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or Veteran status. Different makes us better.

Arete Incident Response is an outstanding (and growing) company with a very dedicated, fun team. We offer competitive salaries, fully paid benefits including Medical/Dental, Life/Disability Insurance, 401(k) and the opportunity to work with some of the latest and greatest in the fast-growing cyber security industry.

When you join Arete…

You’ll be doing work that matters alongside other talented people, transforming the way people, businesses, and things connect with each other. Of course, we will offer you great pay and benefits, but we’re about more than that. Arete is a place where you can craft your own path to greatness. Whether you think in code, words, pictures or numbers, find your future at Arete, where experience matters.

Equal Employment Opportunity

Apply on areteir.wd1.myworkdayjobs.com About employer

More about this job

Responsibilities

Performs digital forensic analysis on various operating systems and network appliances to identify indicators of compromise and adversary tactics. Documents findings in detailed reports and collaborates with cross-functional teams to enhance threat intelligence and incident response efforts.

Requirements

Requires an Associate's degree with 6+ years of experience or a Bachelor's degree with 2+ years of experience in incident response or digital forensics. Candidates must possess at least two relevant industry certifications such as Security+, GCIH, or GCFE.

Skills

Digital forensic analysis
Incident response
Windows forensics
Linux forensics
Mac forensics
Memory forensics
Network security monitoring
Log analysis
EnCase
Axiom
FTK
Splunk
Volatility
WireShark
MITRE ATT&CK
Cyber Kill Chain

Benefits

Medical insurance
Dental insurance
Life insurance
Disability insurance
401(k)

Visa sponsorship

Not detected in the job text

Keywords

Digital Forensics
Incident Response
Windows
Linux
Mac
RAM Forensics
Network Security Monitoring
EnCase
Axiom
FTK
X-Ways
SIFT
Splunk
Redline
Volatility
WireShark
TCP Dump
MITRE ATT&CK
Cyber Kill Chain
PII
PHI
Cyber Insurance
Security+
Network+
GCIH
GCFE
GCFA
CEH
CHFI
Threat Intelligence

Report this job

Work requirements

Jobs in Canada