Cyber Incident Response Lead & Forensics Expert

KPMG-Canada; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading consulting firm in Canada seeks a Senior Manager for their Cyber Response practice. The ideal candidate will lead investigations, manage incident response teams, and require a strong background in cyber forensics. Responsibilities include hands-on analysis and maintaining client relationships, while fostering team development. Candidates should have at least five years of experience in incident response and relevant certifications, alongside excellent communication skills.

Qualifications

• A minimum of five years of previous incident response or CSIRT experience is desired.
• Hands-on experience with various security tools including log management, web proxies, endpoint protection platforms, etc.
• Minimum of five years of experience with using forensic software applications and techniques to capture electronic data from computers and networks.

Responsibilities

• Lead and manage computer and network forensic investigations and cyber incident response engagements.
• Gather, analyze and maintain data to support investigative, risk and mitigation efforts.
• Demonstrate deep technical knowledge in operating system security, network security, cryptography, and malware analysis.

Education

Undergraduate degree in Computer Science, Information Technology, or related field

Completion of relevant certifications such as GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE)

Tools

EnCase

FTK

Autopsy

Magnet Axiom

Cellebrite

Wireshark

OpenVAS

Snort

Magnet IEF / Axiom

Job description

A leading consulting firm in Canada seeks a Senior Manager for their Cyber Response practice. The ideal candidate will lead investigations, manage incident response teams, and require a strong background in cyber forensics. Responsibilities include hands-on analysis and maintaining client relationships, while fostering team development. Candidates should have at least five years of experience in incident response and relevant certifications, alongside excellent communication skills.