Incident Response Senior Consultant

Jobgether; Canada; Remote; CAD 100,000 - 165,000; Full time

Benefits offered by this job

Remote work opportunity

Equity opportunities

Professional development

Job summary

Jobgether, on behalf of a partner, is seeking an Incident Response Senior Consultant based in Canada. Lead IR engagements, perform digital forensics, threat hunting, and cloud incident response across AWS, Azure, and GCP, while communicating findings to executives.

Role involves mentoring, travel up to 30%, and developing new investigative methodologies to drive client outcomes and industry leadership.

Qualifications

• Significant experience in incident response, cybersecurity consulting, information security, or related field.
• Experience leading incident response investigations, preferably in consulting or matrixed environments.
• Background in computer forensics with forensic tools usage.
• Knowledge of network protocols, forensic analysis, and security technologies.
• Experience with cloud incident response in AWS/Azure/GCP.

Responsibilities

• Lead incident response engagements, coordinating investigations and delivering client outcomes.
• Develop threat-hunting techniques to identify activity across large datasets.
• Conduct intrusion investigations under external legal direction when required.
• Perform host and network-based forensics across Windows, macOS, Linux.
• Analyze evidence to determine scope, impact, timeline, and extent of compromises.
• Support malware analysis and static/dynamic analysis activities.
• Conduct network forensics using protocols and tools like Zeek/Bro, Suricata.
• Drive remediation plans to strengthen client security posture.
• Support cloud incident response across AWS, Azure, GCP environments.
• Communicate findings to executives, regulators, and legal stakeholders.
• Lead and mentor team members, guiding investigative tasks and approaches.
• Produce client-facing deliverables and contribute to thought leadership.
• Apply AI to improve decision-making and workflows.

Skills

Incident response

Cybersecurity consulting

Digital forensics

Cloud incident response

Threat hunting

Network forensics

Malware analysis

Executive communication

Project management

Leadership

Mentoring

Travel readiness

AI in investigations

Education

Bachelor's or master's degree in Computer Science or related field

Tools

Zeek/Bro

Suricata

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Incident Response Senior Consultant based in Canada.

This is a senior cybersecurity consulting role focused on helping organizations investigate and respond to sophisticated security incidents. You will lead complex incident response engagements and work alongside highly skilled security professionals on high-impact investigations. The role combines digital forensics, threat hunting, network analysis, malware investigation, remediation, and cloud incident response. You will interact directly with customers, executives, regulators, and legal counsel, translating complex technical findings into clear recommendations. The position also offers opportunities to develop new investigative methodologies and contribute to industry thought leadership. You will work in a highly autonomous, collaborative environment where continuous learning, technical curiosity, and innovation are strongly encouraged. The role requires flexibility to travel on short notice, with travel expected for up to 30% of the time.

Accountabilities:

• Lead incident response engagements, coordinating investigations and ensuring high-quality technical and client outcomes.
• Develop and apply innovative threat-hunting techniques to identify malicious activity across large and complex datasets.
• Conduct intrusion investigations under the direction of external legal counsel when required.
• Perform host and network-based forensic investigations across Windows, macOS, and Linux environments.
• Analyze forensic evidence to determine the scope, impact, timeline, and extent of security compromises.
• Perform basic malware analysis and support static and dynamic analysis activities.
• Conduct network forensic analysis using network protocols, logs, and tools such as Zeek/Bro and Suricata.
• Support investigations involving targeted threats, including advanced persistent threats, organized cybercrime, and hacktivist activity.
• Develop customized tactical and strategic remediation plans to help compromised organizations recover and strengthen their security posture.
• Support cloud incident response activities across environments such as AWS, Azure, and GCP.
• Communicate technical findings, risks, recommendations, and investigation outcomes to customer executives, management teams, regulators, and legal stakeholders.
• Lead and mentor team members while providing clear guidance on investigative tasks, methodologies, and technical approaches.
• Produce high-quality reports, presentations, recommendations, and other client-facing deliverables.
• Contribute to cybersecurity thought leadership through technical publications, webinars, presentations, and industry events.
• Apply AI technologies to improve investigative decision-making, streamline workflows, increase efficiency, and enhance business outcomes.

Requirements:

• Significant professional experience in incident response, cybersecurity consulting, information security, or a closely related field.
• Demonstrated experience leading or managing incident response investigations, preferably within a consulting or matrixed environment.
• Strong background in computer forensics, including the use of forensic tools to determine the scope and impact of compromises.
• Strong knowledge of network protocols, network forensic analysis, and network security technologies.
• Experience with tools such as Zeek/Bro or Suricata is highly valuable.
• Knowledge of malware analysis and reverse engineering, including familiarity with static and dynamic analysis techniques.
• Strong understanding of targeted attacks, remediation strategies, and secure network architecture.
• Experience with cloud incident response, particularly in AWS, Azure, and/or GCP environments.
• Proven ability to independently complete complex technical tasks with minimal supervision.
• Strong project management skills and experience coordinating technical activities across teams.
• Excellent communication skills, with the ability to explain complex technical findings to both technical and executive audiences.
• Demonstrated leadership, mentoring, and stakeholder management capabilities.
• Curiosity about emerging vulnerabilities, breaches, attack techniques, and cybersecurity trends.
• Proven experience using AI technologies to enhance decision-making, automate or streamline workflows, improve efficiency, and support business outcomes.
• Strong motivation to continuously develop both technical and interpersonal skills.
• Bachelor's or master's degree in Computer Science, Computer Engineering, Mathematics, Information Security, Cybersecurity, Information Assurance, Intelligence Studies, or a related discipline. Relevant professional experience or training may be considered in lieu of a degree.
• Legal authorization to work in Canada.
• Availability to travel on short notice, up to approximately 30% of the time.

Benefits:

• Base salary range of CAD $100,000–$165,000 per year.
• Variable/incentive compensation.
• Equity opportunities.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holiday benefits.
• Paid parental and adoption leave.
• Professional development opportunities at all career levels.
• Employee networks, local community groups, and volunteer opportunities.
• Inclusive and collaborative work environment.
• Support for veterans and professionals with disabilities.
• Remote work opportunity.
• Equal-pay commitment and compensation based on relevant experience, skills, certifications, and location.