Lead DFIR Incident Commander for Global Game Security

Ubisoft; Montreal (administrative region); On-site; CAD 110,000 - 150,000; Full time

Job summary

Ubisoft Montréal is seeking a Security Specialist - Incident Commander (DFIR) to lead responses to complex cybersecurity incidents impacting global infrastructure, game production environments, and player-facing services. You’ll join the Security and Risk Management team and help strengthen our detection, investigation, and response capabilities across the organization.

You will coordinate incident management across security operations, IT, legal, and production teams; conduct proactive threat

Qualifications

• Experience responding to and coordinating cybersecurity incidents from detection through resolution.
• Ability to work independently, identify gaps, and implement improvements.
• Strong knowledge of SIEM/EDR platforms and related tools.
• Hands-on experience with digital forensic investigations.

Responsibilities

• Lead the response to high-severity cybersecurity incidents across teams (security operations, IT, legal, production).
• Coordinate incident management activities and act as central point of contact during investigations.
• Analyze security risks affecting game production environments, live services, and data.
• Improve incident response processes, procedures, and tools.
• Conduct proactive threat hunting across enterprise environments.
• Perform digital forensic investigations using Velociraptor, Autopsy, and related tools.
• Communicate findings and response plans to stakeholders; mentor team members.

Skills

Incident response

Coordination

Threat hunting

Digital forensics

Splunk

Endpoint detection

Tools

Velociraptor

Autopsy

Axiom

Job description

Ubisoft Montréal is seeking a Security Specialist - Incident Commander (DFIR) to lead responses to complex cybersecurity incidents impacting global infrastructure, game production environments, and player-facing services. You’ll join the Security and Risk Management team and help strengthen our detection, investigation, and response capabilities across the organization.

You will coordinate incident management across security operations, IT, legal, and production teams; conduct proactive threat