Principal Digital Forensics Investigator

eSentire; Canada; On-site; CAD 180,000 - 190,000; Full time

Benefits offered by this job

Annual bonus program

Parental leave

RRSP/401K matching

Referral bonus

Job summary

eSentire, the Authority in Managed Detection and Response, seeks a Principal to lead advanced incident response and digital forensics engagements. You will tackle the most complex casework, coordinate with SOC, TRU and engineering teams, and deliver high-quality investigative outcomes in demanding environments across North America.

You bring 8–10 years of IT investigations and a four-year degree, mastery of forensics tools, and the ability to communicate technical findings to clients clearly.

Qualifications

• Four-year degree in a relevant discipline and eight to ten years of experience.
• Experience acting as a consultant in investigation and remediation of polymorphic trojans and modern ransomware variants.
• Mastery of mainstream forensics tools such as EnCase, FTK, Axiom, X-Ways, etc.
• Military or law enforcement background with ten+ years can substitute education requirements.
• Demonstrated expertise in IT investigations and digital forensics.
• Strong knowledge of information security fundamentals.
• Security consulting and/or case investigation background preferred.
• Excellent written and verbal communication and client management skills.

Responsibilities

• Manage CSI Team tools, devices and infrastructure components.
• Renew relevant software licenses and infrastructure subscriptions.
• Oversee implementation of new technologies that support the CSI mission.
• Identify and recommend new technologies to improve efficiency.
• Coordinate with internal stakeholders to align IR with products and technologies.
• Continue to perform duties of Senior Digital Forensic Investigator.
• Provide mentoring to junior staff.
• Work rotating shifts and be on-call as required.
• Travel to client locations in the US and Canada, onsite as needed.
• Oversee technical engagements with partners and end clients.

Skills

Incident response

Digital forensics

Threat analysis

IT investigations

Forensics tools knowledge

Education

Bachelors degree in a relevant discipline

Tools

EnCase

FTK

Axiom

X-Ways

Job description

eSentire, the Authority in Managed Detection and Response (MDR), protects the critical data and applications of 2000+ organizations in 80+ countries across 35 industries from known and unknown cyber threats by providing Exposure Management, Managed Detection and Response and Incident Response services designed to build an organization's cyber resilience & prevent business disruption. Founded in 2001, eSentire protects the world's most targeted organizations, with 65% of its global base recognized as critical infrastructure, vital to economic health and stability. By combining open XDR platform technology, 24/7 threat hunting, and proven security operations leadership, eSentire's award-winning MDR services and team of experts help organizations anticipate, withstand and recover from cyberattacks.

About the Role:

The Principal serves as a tactical arm of eSentire’s Incident Response team. Main function of this role is to drive deep expertise and experience in incident response, and digital forensics engagements. As a top tier operator, the position handles the most volatile and complex casework, while ensuring optimum quality of service and responsiveness. Casework spans from financially motivated data breaches to state-affiliated espionage and ideology-driven attacks aimed at information gathering, manipulation and disruption. Real domain expertise, mixed with ability to execute, and mastery of relevant technologies must produce investigative conclusions that stand scrutiny in the court of law.

The position operates in close coordination with eSentire’s SOC, Customer Success Management, TRU and Engineering teams to drive fast and effective mobilization, source identification, containment, and quantification of informational losses in response to cyber attacks in motion.

Responsibilities:

• Manage all CSI Team tools, physical devices and infrastructure components.
• Renew relevant software licenses.
• Renew infrastructure subscriptions.
• Oversee the implementation of new technologies that support the CSI team mission.
• Identify, research, and make written recommendations regarding new technologies that would drive efficiency or otherwise enhance the eSentire IR Program.
• Liaise with eSentire internal stakeholders to ensure the eSentire IR program is continually aligned with all eSentire Products and Technologies.
• Continue to perform all the duties of a Senior Digital Forensic Investigator.
• Provide support and mentoring to Senior Digital Forensic Investigators and junior level staff.
• Work rotating shifts and be available on an on-call basis as required.
• Be prepared to work, as required, for extended periods outside of regularly scheduled hours, including weekends, and holidays.
• Be prepared to travel for short periods and work onsite at client locations throughout the United States and Canada, as required.
• Oversee and provide guidance regarding technical engagements with partners and end clients.

Requirements:

• The Principal position requires a four-year degree in a relevant discipline and eight to ten years of experience.
• Experience acting in a consultant capacity, in the investigation and remediation of polymorphic trojans, and modern ransomware variants.
• Mastery of one or more mainstream forensics tools such as EnCase, FTK, Axiom, X-Ways, etc.
• In lieu of education requirements, a military or law enforcement background with ten or more years of relevant work experience is acceptable.
• Demonstrable expertise in IT investigations and digital forensics
• Strong working knowledge of information security fundamentals
• Security consulting and/or case investigation background preferred
• Excellent written and verbal communication, listening and client management skills
• Ability to articulate complex IT technical information to customers in a non-technical fashion
• Self-motivated, strong analytical skills and detail-oriented
• Demonstrated presentation skills
• This posting is for an existing vacancy

Compensation Range

The expected base salary range for this role is $180,000-$190,000K CAD. This range is for the primary location for which the job is posted. Actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge, skills, and internal equity.

Our Culture and Values

We celebrate diversity, operating with mutual respect and consideration, in an environment that fosters inclusivity for all. We believe that a variety of perspectives, backgrounds, and experiences make us stronger – if you’re enthusiastic about this opportunity but don’t meet every qualification, we encourage you to apply anyway. It takes a diverse set of thoughts, cultures, backgrounds, and perspectives to be a true market leader.

Total Rewards

We believe in rewarding performance and providing comprehensive benefits tailored to support your well-being. Our package includes:

• We reward strong performance through role-specific incentive programs, including either an annual bonus program or a competitive commission plan
• Paid parental leave
• Matching RRSP or 401K program
• Competitive employee referral bonus

Artificial Intelligence (AI) Notice:

As part of our recruitment process, eSentire may use Artificial Intelligence (AI) tools to assist recruiters with reviewing and summarizing application materials. All candidate evaluations and hiring decisions are made by members of our hiring team

Accommodation

If you have any accessibility requirements during the recruitment process, please reach out to our HR team at [e-mail] and any accommodation needs will be addressed upon request. Your talents and unique perspectives are valued, and we look forward to the opportunity to work together to build a more inclusive future.

It's our mission at eSentire to protect our customers 24/7/365 and we extend this conviction to job seekers. During the application and interview process, eSentire will communicate with you from one of our corporate "@esentire.com" email addresses, never from a public email address.