Engagement Lead, Canada

Arete Event Staffing Firm; Canada; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Medical/Dental benefits

Life/Disability Insurance

401(k)

Job summary

Arete Incident Response in Canada seeks an experienced professional to lead digital investigations and incident response engagements for global clients. You will guide strategy, educate buyers on cost-benefit decisions, and coordinate across teams to deliver timely, high-quality results.

This role requires a strong technical background across Linux/Unix, Windows, cloud platforms, SIEM, EDR, IAM, and security architectures, with 7+ years IR leadership.

Qualifications

• Minimum 7 years conducting digital investigations or leading full-cycle incident response investigations.
• Bachelor's degree in a computer science related discipline with 8+ years related experience or advanced degree/JD with 4+ years experience.
• Fluent in Canadian French.

Responsibilities

• Lead engagement management and strategy for IR engagements.
• Educate clients on cost-benefit decisions and decision-making processes.
• Monitor budgets and hours against the SOW and SLA.
• Mentor junior team members and ensure timely delivery.

Skills

Project leadership

Digital investigations

Client communication

Mentoring

Budget management

Security operations

Education

Bachelor's degree in computer science or related field

Industry certifications: GCFA, GCFE, GCIH, CISSP, Security+

Tools

EDR tools

SIEM

M365/Exchange/Google Workspace

IAM/Zero Trust

Cloud platforms (AWS/Azure/GCP)

Job description

ROLES & RESPONSIBILITIESResponds to Client, Counsel, Carrier (CCC) in accordance with Key Performance Indicators (KPIs) and urgency of requestsIs solely responsible for the success, failure, and management of all team members’ activities and communications during the engagementEngagement Management (External):Leads the technical conversation and drive the direction and strategy of the engagementEducates the Client on how to make an informed decisionGuides the Client on the importance of conducting a cost vs. benefit analysisMaintains accountability for accurate and timely password changes within 24 hoursBuilds the strategy for success and deliver itAssists client with developing and executing their recovery plansEstablishes priorities for their IT and Arete engagement personnelIs the subject matter expert on various technologies, infrastructure, and engagement-specific itemsTracks progress to completionEngagement Management (Internal):Communicates clearly and manages priorities by role ensuring each team member understands their tasks, values, and time to deliverEnsures project workstreams are being delivered on-timeMonitors budget and team hours against allocated hours within the statement of work (SOW)Ensures daily time entry is complete within Project management tool for the teamEnsures project workstreams are being delivered on-timeEnsures project budget is correct. Identifies potential overages and requests amendments when workstream budgets reach 75%, if necessaryEnsures the engagement team is utilized to a blended 70%Easily identifies opportunities for add-on services to continue assisting Clients with Arete resourcesEnsures teams execute tasks successfully and validates work product qualityProvides routine updates to CCC regarding overall engagement and action itemsDelivers to the Client on-time based on agreed upon service level agreement (SLA) and/or as neededCoaches and mentors junior team membersProposes tactics and strategies that impact overall processesMay perform other duties as assigned by managementSKILLS AND KNOWLEDGEExcellent time management and organizational skillsWidely recognized technical abilitiesAbility to teach othersProficiency with reading the room and adjusting conversational style accordingly.Ability to navigate difficult conversations effortlesslyExpert at managing client expectationsAbility to independently train, mentor, coach and lead team members globally and take ownership over their wins and lossesAbility to lead projects with security implementationsThorough background or knowledge of network enterprise systems administrationThorough knowledge and understanding of operating systems and hardware architectures: Linux/Unix, Mainframe, Windows, Cloud, etc.Thorough knowledge and experience with core set of standard Industry technology and platforms and familiarity with cybersecurity tools. Hands-on not required but a plusEndpoint Detection and Response (EDR) solutionsE-mail platforms: Microsoft Office (M365), On-premises Exchange, Google WorkspaceAnti-virus (AV) vendorsIdentity Access Management (IAM)/Zero Trust systemsDisaster Recover PlansFirewall and Virtual Private Network (VPN) platformsRemote access toolsKnowledge of Enterprise architectureNetwork segmentationCloud Provider Platforms:Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)On-premises technologies, Physical and VirtualServers, Firewalls, routers, storage, Security Information Event Management (SIEM), Multi-factor authenticationDMZ configurationsThorough knowledge of containment, preservation, and acquisition of data within compromised IT environmentsThorough knowledge of email servers: on-premises, cloud hosted, and third-party hostedDemonstrates deep understanding of configurationsUnderstands how email servers connect to or authenticate with Active Directory (AD)Understands how to collect relevant logs from popular email services (Exchange, Exchange Online, Google Workspace, and M365)Familiarity with or knowledge of how to familiarize oneself with additional platforms as requiredComfortable directing IT personnel to perform collection of required log informationKnowledgeable with securing email platforms and directing IT administrators on proper configuration techniquesAbility to establish priorities, work independently and proceed with objectives with minimal supervisionJOB REQUIREMENTSMinimum of 7 years conducting digital investigations or leading full-cycle incident response investigations for a major consulting firm or global IR companyBachelor's degree in a computer science related discipline and 8+ years related experience or Master's Degree and 6+ years related experience or J.D. and 4+ years related experienceMinimum of 1 industry certifications: GCFA, GCFE, GCIH, GISP, CISSP, Security+, MCSC, Network+, or equivalentFluent in Canadian FrenchDISCLAIMERThe above statements are intended to describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities, duties and skills required personnel so classified.WORK ENVIRONMENTWhile performing the responsibilities of this position, the work environment characteristics listed below are representative of the environment the employee will encounter: Usual office working conditions. Reasonable accommodation may be made to enable people with disabilities to perform the essential functions of this job.PHYSICAL DEMANDSNo physical exertion requiredTravel within or outside of the stateLight work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force as frequently as needed to move objectsTERMS OF EMPLOYMENTSalary and benefits shall be paid consistent with Arete salary and benefit policy.FLSA OVERTIME CATEGORYJob is exempt from the overtime provisions of the Fair Labor Standards Act.DECLARATIONThe Arete Incident Response Human Resources Department retains the sole right and discretion to make changes to this job description.EQUAL EMPLOYMENT OPPORTUNITYWe’re proud to be an equal opportunity employer- and celebrate our employees’ differences, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or Veteran status. Different makes us better.Arete Incident Response is an outstanding (and growing) company with a very dedicated, fun team. We offer competitive salaries, fully paid benefits including Medical/Dental, Life/Disability Insurance, 401(k) and the opportunity to work with some of the latest and greatest in the fast-growing cyber security industry.When you join Arete…You’ll be doing work that matters alongside other talented people, transforming the way people, businesses, and things connect with each other. Of course, we will offer you great pay and benefits, but we’re about more than that. Arete is a place where you can craft your own path to greatness. Whether you think in code, words, pictures or numbers, find your future at Arete, where experience matters.Equal Employment OpportunityWe’re proud to be an equal opportunity employer- and celebrate our employees’ differences, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or Veteran status. Different makes us better.About UsArete Incident Response is an elite team of the world’s leading cybersecurity and digital forensics experts who combat today’s sophisticated cyberattacks. We work tirelessly to provide unparalleled capabilities and solutions throughout the entire cyber incident life cycle. These include incident response readiness assessments and penetration tests as well as post-incident response, remediation, containment, and eradication services.We work in close collaboration with industry leaders and government agencies along with leading cybersecurity technology platforms to deliver an innovative, intelligence-based approach to solving our client’s toughest challenges.If you want to work with the most talented and experienced people in the industry with the desire to be a cyber hunter and industry expert, we want you to be a part of our team.