Incident Response Specialist
- Toronto, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
We're Hiring: Incident Response Specialist – Cybersecurity
Location: Toronto, Scarborough, or Barrie, ON (Hybrid - 2 days/week)
Contract Opportunity - 1 Year with potential to extend
Pay Rate:
- T4 - $38.51
- INC - $43.71
Work Arrangement & Schedule
- Hybrid work model with offices in Downtown Toronto, Scarborough, or Barrie.
- Four 10-hour shifts per week.
- Shift hours: 10:20 AM – 8:20 PM EST.
- Available rotations: Sunday–Wednesday or Wednesday–Saturday.
- Two in-office days per week.
- Weekend and statutory holiday coverage is required.
- Shift assignments are determined by business requirements.
What You'll Be Doing
- Investigate and respond to escalated Level 2 cybersecurity incidents, including complex security breaches.
- Conduct digital forensic investigations, live response analysis, and endpoint activity reviews.
- Leverage Endpoint Detection and Response (EDR) tools to identify, investigate, contain, and mitigate security threats.
- Develop host activity timelines and analyze forensic evidence to determine the scope and impact of incidents.
- Prepare detailed incident reports, investigation findings, and technical documentation.
- Coordinate incident response activities with internal security teams and external technology partners.
- Monitor, maintain, and support enterprise security tools and applications.
- Identify opportunities to improve incident response processes, operational procedures, and security capabilities.
What We're Looking For
- 3–4 years of experience in Security Operations, Cybersecurity, or Incident Response.
- 3–4 years of experience investigating and responding to security breaches.
- 3–4 years of hands-on experience with EDR tools and endpoint threat investigations.
- 2–3 years of experience in Digital Forensics and forensic analysis.
- Experience conducting live response investigations and developing host activity timelines.
- Experience preparing incident response reports and operational documentation.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal communication skills.
- Post-secondary education in Computer Science, Information Technology, Business, or a related discipline, or equivalent practical experience.
Relevant cybersecurity certifications (CISSP, CISM, CISA, SANS, or similar) are considered an asset.
More about this job
Responsibilities
Investigate and respond to escalated Level 2 cybersecurity incidents using digital forensics, live response, endpoint analysis, and EDR tools to identify, contain, and mitigate threats. Develop host activity timelines, document findings, coordinate with internal and external partners, support security tools, and improve incident response processes.
Requirements
Candidates should have 3–4 years of experience in security operations, cybersecurity, incident response, breach investigations, and hands-on EDR investigations, plus 2–3 years in digital forensics. They should have experience with live response, host timelines, and incident reporting, strong analytical and communication skills, and post-secondary education or equivalent experience; relevant certifications are an asset.
Skills
- Incident Response
- Cybersecurity
- Digital Forensics
- Live Response Analysis
- Endpoint Detection And Response
- Endpoint Threat Investigation
- Security Breach Investigation
- Host Activity Timeline Development
- Forensic Evidence Analysis
- Incident Reporting
- Technical Documentation
- Security Operations
- Threat Containment And Mitigation
- Analytical Problem-Solving
- Troubleshooting
- Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
Keywords
- Cybersecurity
- Incident Response
- Level 2 Security Incidents
- Security Breaches
- Digital Forensics
- Live Response
- Endpoint Detection And Response
- EDR
- Endpoint Threat Investigations
- Host Activity Timelines
- Forensic Evidence
- Security Operations
- Incident Reports
- Operational Documentation
- Threat Identification
- Threat Containment
- Threat Mitigation
- Security Tools
- CISSP
- CISM
- CISA
- SANS