Chef d’Équipe Cybersécurité (DFIR)

DELAN - IT Talent Solutions; Laval; On-site; CAD 120,000 - 170,000; Full time

Job summary

Forensic Focus in Laval, Quebec is seeking a DFIR Lead to head a small technical team handling complex cybersecurity incidents, assigning work among specialists, overseeing timelines, and conducting forensic analysis of workstations, servers and network equipment.

The role requires 5+ years DFIR experience, including at least one year in management, strong malware analysis, knowledge of TTPs, multi‑platform expertise (Windows, Mac, Linux), cloud experience (Azure, AWS, GCP), familiarity with

Qualifications

• 5+ years of DFIR experience with at least 1 year in management.
• Strong malware analysis skills (static and dynamic) and knowledge of TTPs.
• Multi‑platform expertise: Windows, Mac and Linux; cloud experience (Azure, AWS, GCP).
• Familiarity with Volatility, Wireshark; GCFA certification is a plus.

Responsibilities

• Lead a small technical team handling complex cybersecurity incidents.
• Assign work among specialists, oversee timelines and deliverables.
• Personally conduct forensic analysis of workstations, servers and network equipment.
• Coordinate with clients, insurers and breach coaches; review technical reports before delivery.

Skills

DFIR leadership

Malware analysis (static/dynamic)

TTPs

Windows

Mac

Linux

Cloud (Azure, AWS, GCP)

MITRE ATT&CK

Tools

Volatility

Wireshark

Job description

The Role

This position leads a small technical team handling complex cybersecurity incidents, assigning work among specialists, overseeing timelines, and personally conducting forensic analysis of workstations, servers and network equipment. The lead also coordinates with clients, insurers and breach coaches, and reviews technical reports before delivery.

Skills & Experience

Candidates need 5+ years of DFIR experience, including at least one year in management, with strong malware analysis skills (static and dynamic), knowledge of TTPs, multi-platform expertise (Windows, Mac, Linux), cloud experience (Azure, AWS, GCP), and familiarity with Volatility, Wireshark and MITRE ATT&CK. GCFA certification is an asset.

Who It Suits

Ideal for an experienced DFIR practitioner ready to step into a leadership role, combining technical forensic casework with team management, mentoring, and senior-level client communication during high-pressure incidents.