DFIR Manager

Forensic Focus; Canada; Remote; CAD 95.000 - 162.000; Vollzeit

Zusammenfassung

Forensic Focus in Canada seeks an experienced DFIR Manager to lead complex incident response engagements from triage through containment and remediation. The role blends hands-on forensic work with client leadership and strategic oversight.

The position is remote in Canada, full-time, with a competitive salary range reflecting 6+ years of DFIR expertise and leadership responsibilities.

Qualifikationen

• 6+ years of DFIR with hands-on incident response experience.
• Strong endpoint, network and cloud forensics capabilities.
• Familiar with EDR/XDR tools such as CrowdStrike, SentinelOne or Defender and SIEM platforms.
• Knowledge of chain of custody and the NIST incident response framework.

Aufgaben

• Lead complex incident response engagements from triage through remediation.
• Mentor junior investigators and serve as client liaison to executives and counsel.
• Coordinate with legal teams and manage case strategy and communications.
• Ensure rigorous chain of custody and adherence to NIST IR practices.

Kenntnisse

DFIR experience

Endpoint forensics

Network forensics

Cloud forensics

EDR/XDR tools

SIEM

Chain of custody

NIST IR framework

Tools

CrowdStrike

SentinelOne

Microsoft Defender

SIEM

Jobbeschreibung

# DFIR Manager*Connect-AI***Canada**Remote · Manager · Full-time### The RoleThis position involves leading complex incident response engagements from triage through containment and remediation, covering ransomware, business email compromise, insider threats and cloud compromises. The manager performs hands-on forensic analysis while acting as senior technical liaison to clients, legal counsel and executives.### Skills & ExperienceCandidates need 6+ years of DFIR experience, strong endpoint, network and cloud forensics skills, and familiarity with EDR/XDR tools like CrowdStrike, SentinelOne or Defender, plus SIEM platforms, chain of custody practices and NIST incident response frameworks.### Who It SuitsIdeal for an experienced incident responder from a consulting or professional services background who wants to blend technical investigation with team mentorship, client leadership and broader strategic ownership.Typical advertised salary forIncident Response roles in Canada:**C$95,000–C$162,000**(median C$130,000 — from55 recent listings analysed by Forensic Focus).