Consultant – Cyber Response

KPMG Canada; Toronto; On-site; CAD 65,000 - 90,000; Full time

Job summary

Forensic Focus in Toronto, Canada, is seeking a junior cyber incident response and digital forensics consultant to support investigations, including log analysis, malware triage, and reverse engineering of binaries.

You will analyze host and network artifacts, document findings in investigative reports, and participate in on-call response duties for client engagements, with structured career progression in a large advisory firm's cyber practice.

Qualifications

• 1–3 years in incident response or forensic analysis
• Familiarity with MITRE ATT&CK framework and SIEMs is valued

Responsibilities

• Assist cyber incident response investigations for client engagements.
• Document findings and prepare investigative reports for stakeholders.

Skills

Incident response

Digital forensics

Reverse engineering

Log analysis

Documentation

Education

GCFE

GCFA

Tools

EnCase

FTK

Autopsy

Magnet AXIOM

Cellebrite

Wireshark

Job description

The Role

This position supports cyber incident response and digital forensic investigations, involving log analysis, malware triage, and reverse engineering of binaries. The consultant analyzes host and network artifacts, documents findings in investigative reports, and participates in on-call response duties for client engagements.

Skills & Experience

Candidates should have experience with forensic tools such as EnCase, FTK, Autopsy, Magnet AXIOM, Cellebrite and Wireshark, plus familiarity with EDR platforms like CrowdStrike or SentinelOne. Knowledge of MITRE ATT&CK, SIEM tools, and certifications like GCFE or GCFA are valued.

Who It Suits

Ideal for early-career professionals with one to three years in incident response or forensic analysis who enjoy client-facing consulting work and want structured career progression within a large advisory firm's cyber practice.