Movojobs
Back to results

Added

BeachHead

Incident Response Analyst-EDR/Banking

  • Toronto, ON, Canada

$46.01 to $55.22 CAD / hour · Contract

Apply About employer

Applications open in a new tab.

Job details

Pay
$46.01 to $55.22 CAD / hour
Job type
Contract
Apply by
Posting language
English
Posted

Original job description

Could you help strengthen enterprise cyber defences through advanced incident response? Apply Now!

Working with one of our top financial clients, this role calls for an Incident Response Analyst-EDR/Banking to investigate and respond to complex cybersecurity incidents, support threat containment and mitigation, and collaborate with experienced professionals across security operations. This opportunity offers exposure to enterprise-scale investigations, advanced endpoint detection and response tooling, forensic analysis, and operational readiness initiatives.

Pay rate range(CAD): $46.01/hr – $55.22/hr

Responsibilities

  • Investigate and manage escalated cybersecurity incidents, including breach-class events.
  • Conduct digital forensics, live response analysis, and host activity timeline development.
  • Use endpoint detection and response tools to monitor, assess, contain, and mitigate threats.
  • Coordinate incident management activities with internal security teams and external service providers.
  • Monitor and maintain information security tools and applications supporting critical operations.
  • Restore services, implement approved changes, and manage operational activities within established service levels.
  • Prepare clear, accurate incident reports, activity reports, audit materials, and operational documentation.
  • Develop, assess, and improve security procedures, processes, and controls in line with established standards.
  • Collaborate with internal and external stakeholders to support information security objectives and operational requirements.
  • Provide technical information security expertise during investigations, service requests, projects, and operational initiatives.
  • Identify opportunities to improve security capabilities, streamline processes, and strengthen operational efficiency.
  • Contribute to knowledge sharing, technical development, mentoring, and continuous improvement initiatives.
  • Gather and document requirements for audits, reports, projects, and security-related activities.
  • Support the planning and implementation of operational programs and process enhancements.
  • Apply risk-informed judgment when protecting information assets and making security decisions.
  • Maintain current knowledge of information security practices, technologies, and industry developments.

Desired Skill-Set

  • Three to four years of experience in security operations and incident response.
  • Three to four years of experience investigating breach-class incidents.
  • Two to three years of experience in digital forensics or forensic analysis.
  • Three to four years of experience using endpoint detection and response tooling.
  • Three to four years of experience developing and assessing operational process documentation.
  • Three to four years of experience performing live response analysis and developing host activity timelines.
  • Two to three years of experience preparing incident response reports.
  • Post-secondary education in Business, Computer Science, Information Security, or a related field, or an equivalent combination of training and experience.
  • Experience supporting information security operations or multiple areas of systems and computer operations.
  • In-depth knowledge of information security processes, procedures, and controls.
  • Strong understanding of information security support and operations concepts, practices, and technologies.
  • Strong analytical, problem-solving, and data-driven decision-making skills.
  • Strong verbal and written communication skills.
  • Effective collaboration, partnering, negotiation, and influencing skills.
  • Ability to diagnose and resolve complex information security issues independently.
  • Ability to manage multiple priorities, exercise sound judgment, and determine appropriate escalation paths.
  • Ability to develop effective relationships with technical, business, and external stakeholders.
  • Ability to work within established security policies, standards, procedures, and risk management practices.

Nice to Have

  • An information security certification or active pursuit of a related certification through a recognised professional institution.
  • Experience with identity and access management, certification and key management, security platform administration, or information security incident response.
  • Experience supporting enterprise security operations in a regulated environment.
  • Knowledge of security operations across a broad organisational and technology environment.
  • Participation in professional associations, practice communities, or ongoing information security learning.

BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.

Privacy Policy
Apply About employer
More about this job

Responsibilities

Investigate and respond to escalated cybersecurity incidents, including breach-class events, using endpoint detection and response tools, digital forensics, and live response analysis. Coordinate containment and recovery with internal and external stakeholders, maintain security operations, prepare incident and audit documentation, and improve security processes and controls.

Requirements

The role seeks three to four years of experience in security operations, incident response, breach investigations, EDR tooling, live response analysis, and operational documentation, plus two to three years in digital forensics and incident reporting. Candidates should have relevant post-secondary education or equivalent experience, strong information security knowledge, analytical and communication skills, and the ability to manage complex issues and priorities.

Skills

  • Incident Response
  • Security Operations
  • Digital Forensics
  • Live Response Analysis
  • Endpoint Detection and Response
  • Host Activity Timeline Development
  • Threat Containment and Mitigation
  • Incident Reporting
  • Operational Process Documentation
  • Information Security Controls
  • Risk Management
  • Analytical Problem-Solving
  • Stakeholder Collaboration
  • Security Platform Administration

Visa sponsorship

Not detected in the job text

Categories

  • Security & Safety
  • Technology

Keywords

  • Incident Response
  • Cybersecurity
  • Security Operations
  • Breach Investigation
  • Digital Forensics
  • Live Response Analysis
  • Endpoint Detection and Response
  • EDR
  • Threat Containment
  • Threat Mitigation
  • Host Activity Timelines
  • Incident Management
  • Information Security
  • Security Procedures
  • Security Controls
  • Operational Readiness
  • Audit Documentation
  • Risk Management
  • Identity and Access Management
  • Certification and Key Management
  • Security Platform Administration
  • Regulated Environment
  • Service-Level Management
  • Stakeholder Collaboration
  • Continuous Improvement

Report this job