Security Incident Response Engineer — AI & Automation

Forensic Focus; Canada; On-site; CAD 110,000 - 160,000; Full time

Job summary

Forensic Focus in Canada seeks an experienced incident responder to lead investigations across the full incident lifecycle, from triage to containment and recovery. The role covers endpoints, networks, identity, and cloud environments, and emphasizes building detections, automations and AI-assisted workflows to scale internal response.

You will collaborate with engineering and security teams, translate complex technical findings for non-technical stakeholders, and help mature the company’s DFIR

Qualifications

• Strong enterprise incident response experience and practical DFIR knowledge.
• Proficiency in Python, SQL and version control practices.
• Ability to communicate technical findings across teams.

Responsibilities

• Lead investigations across the incident lifecycle from triage to containment and recovery.
• Develop detections, automations and AI-assisted workflows to scale response.
• Collaborate with engineering and security teams to strengthen capabilities across endpoints, networks, identities and cloud.

Skills

Incident response

DFIR

Endpoint forensics

Network analysis

Threat hunting

Python

SQL

Git/GitHub

Automation design

AI tooling

Job description

Forensic Focus in Canada seeks an experienced incident responder to lead investigations across the full incident lifecycle, from triage to containment and recovery. The role covers endpoints, networks, identity, and cloud environments, and emphasizes building detections, automations and AI-assisted workflows to scale internal response.

You will collaborate with engineering and security teams, translate complex technical findings for non-technical stakeholders, and help mature the company’s DFIR