Cybersecurity Analyst / Incident Response (IR) →

Cyberwall Inc; Vaughan; Hybrid; CAD 85,000 - 120,000; Full time

Benefits offered by this job

Diverse client exposure

Growth opportunities

Collaborative team

Job summary

Cyberwall Inc in Vaughan, ON is seeking a Cybersecurity Analyst specializing in incident response to lead threat containment and investigations. You will work with SOC and client IT teams across Canada to analyze incidents, perform forensic analysis, and improve playbooks. The role requires hands-on experience with EDR/XDR and SIEM.

Join a rapidly expanding cybersecurity firm offering growth opportunities and a collaborative environment.

Qualifications

• 3+ years of cybersecurity experience focusing on threat hunting and IR.
• Experience handling real-world security incidents end to end.
• Strong analytical and communication skills.

Responsibilities

• Lead incident response across client environments.
• Conduct deep investigations of security incidents and malware outbreaks.
• Perform host and network forensics.
• Analyze EDR/XDR, SIEM, and cloud security alerts.
• Develop containment and remediation strategies.
• Refine incident response playbooks and procedures.
• Collaborate with SOC and client IT teams during incidents.

Skills

Threat hunting

Incident response

Forensic analysis

Tools

SentinelOne

SIEM

Cloud forensics

Job description

Cybersecurity Analyst / Incident Response (IR)

Location**:**Vaughan, ON (GTA)Employment Type: Full time / Permanent / Contract

Cyberwall is a cybersecurity services provider delivering advanced threat detection, digital forensics, and incident response services to organizations across Canada.

We are seeking a skilled and experienced CybersecurityAnalyst to join our growing security team in Vaughan.

This role is ideal for a hands on cybersecurity professional with strong investigative experience who can lead threat huntin, incident handling, perform deep technical analysis, and guide clients through containment and remediation efforts.

Key Responsibilities

• Lead and coordinate incident response activities across client environments
• Perform advanced investigation and analysis of security incidents, including malware outbreaks, ransomware, insider threats, and advanced persistent threats (APTs)
• Conduct host based and network based forensic investigations
• Analyze EDR/XDR telemetry, firewall logs, SIEM data, and cloud security alerts
• Develop containment, eradication, and recovery strategies
• Provide root cause analysis and detailed post incident reporting
• Support proactive threat hunting initiatives
• Identify gaps in detection capabilities and recommend improvements
• Collaborate with SOC, engineering, and client IT teams during active incidents
• Assist in developing and refining incident response playbooks and procedures
• Stay current with emerging threats, attack techniques, and vulnerability trends

Technical Requirements

• Strong experience with EDR/XDR platforms (SentinelOne or similar)
• Hands on experience with SIEM platforms and log correlation
• Experience investigating Windows, Linux, and cloud based environments
• Solid understanding of network protocols (TCP/IP, DNS, VPNs) and network security architecture
• Experience with firewall and IPS technologies
• Knowledge of MITRE ATT&CK framework and attacker tactics, techniques, and procedures (TTPs)
• Familiarity with forensic tools and methodologies
• Ability to analyze logs in formats such as JSON, Syslog, and CEF
• Scripting capability (PowerShell, Python, or similar) is an asset

Qualifications

• 3+ years of experience in cybersecurity, with strong focus on Threat hunting and Incident Response
• Experience in MSSP, SOC, consulting, or enterprise security environments
• Demonstrated experience handling real world security incidents end to end
• Strong knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
• Experience with ransomware investigations and containment strategies
• Excellent analytical, documentation, and communication skills
• Ability to remain composed and decisive during high severity incidents

What We Offer

• Opportunity to work on complex, real world security incidents
• Exposure to diverse client environments and advanced threat scenarios
• Growth opportunities within a rapidly expanding cybersecurity firm
• Collaborative and technically driven team environment