Senior Associate Information Security & Forensics

Publicis Groupe Holdings B.V; Toronto; On-site; CAD 130,000 - 180,000; Full time

Job summary

A leading communications firm in Toronto needs a Senior Associate, Information Security - Forensics to lead cyber security incident responses. The role requires expertise in forensic analysis, cloud environments, and strong communication skills. Candidates should have over 4 years in an analytical role, particularly in incident response. The compensation ranges from $130,000 to $180,000 annually, based on experience and qualifications.

Qualifications

• 4 or more years of experience in an analytical role of either forensics analyst, threat analyst, incident response, SOC analyst, or security engineer/ consultant.
• Experience with forensics tools such as FTK, EnCase, Autopsy.
• Experience with cloud environments like Azure, AWS, GCP.

Responsibilities

• Lead investigation and response of cyber security incidents.
• Analyze compromised/potentially compromised systems.
• Coordinate evidence/data gathering and document security incident reports.

Skills

EDR Experience - CrowdStrike and/or SentinelOne

Forensics tools experience (FTK, EnCase, Autopsy)

Analytical role experience (forensics analyst, threat analyst, SOC analyst)

Experience with cloud environments (Azure, AWS, GCP)

Strong communication skills

Proficient in scripting languages (Python, Bash, PowerShell)

Job description

Company description

Publicis Groupe is the largest Communications Group worldwide and the leader in Digital and Interactive Communications. Publicis has activities spanning 108 countries on five continents and employs approximately 72,000 professionals worldwide. Publicis Groupe offers local and international clients a complete range of communication services through the nearly 1,400 agencies across our four global networks, including:

Company Overview

Publicis Re:Sources is the shared services provider of Publicis Groupe, delivering a suite of multi-tenant managed and professional services to Publicis Groupe agencies worldwide, in support of key Groupe business operations. Those operations include: Information Technology & Technology Solutions, Finance, Legal, Procurement, Real Estate, Insurance and other services to our business units.

Publicis Re:Sources

Re:Sources is the shared services provider of Publicis Groupe, delivering a suite of multi-tenant managed and professional services to Publicis Groupe agencies worldwide, in support of key Groupe business operations. Those operations include: Information Technology & Technology Solutions, Finance, Legal, Procurement, Real Estate, Insurance and other services to our business units.

Overview

The Senior Associate, Information Security - Forensics is part of a global team and is responsible for incident response of cyber security incidents that are associated with our businesses, clients, and vendors; is technically skilled and ensures incident containment, remediation, and closure. This individual will be expected to work closely with the legal, data privacy, business, and client teams. They should be comfortable with interacting with senior executives, including C-level staff.

Responsibilities

• Incident Commander to lead investigation and response of cyber security incidents.
• Analyze compromised/potentially compromised systems utilizing forensics tools.
• Coordinate evidence/data gathering and document security incident reports.
• Manage, review, and present written and oral reports in a pertinent, concise, and accurate manner for distribution to management.
• Maintain current knowledge of tools and best practices in advanced persistent threats, tools, techniques, procedures of attackers, forensics, and incident response.
• Perform complex forensic investigations into system breaches, data leaks, and system weaknesses.
• Provide technical expertise to staff on security incident monitoring, triage, response, threat & vulnerability management, and security analysis.
• Provide strategic direction on types of Incident Management activities that will drive efficiencies across company, including automation with AI tools.

Qualifications

• EDR Experience- CrowdStrike and/or SentinelOne with experience investigating and analyzing malware and other malicious activity.
• Experience with forensics tools such as FTK, EnCase, Autopsy to collect and analyze file system artifacts, process history, application artifacts, memory collection and analysis for physical and cloud systems (Windows, Mac, Linux).
• 4 or more years of experience in an analytical role of either forensics analyst (Linux, Windows, or MacOS), threat analyst, incident response, SOC analyst, or security engineer/ consultant.
• Experience with cloud environments such as: Azure, AWS, GCP – knowing how to collect and analyze logs from Guard Duty/ Defender and CloudTrail, etc.
• Familiarity with the MITRE ATT&CK or related frameworks.
• Experience developing and managing incident response programs with focus on efficiency through AI development.
• Strong communication skills with confidence leading Incident Response calls with different stakeholders; followed by producing detailed incident reports.
• Proficient in social engineering, phishing, and related fraud schemes.
• Strong general knowledge of security concepts and expertise in network and web application security issues.
• Experience with a scripting language such as Python, Bash, PowerShell, or other scripting language in an incident handling environment.

Additional information

Salary Range
Transparency matters to us. The salary range for this position is $130,000-$180,000 per year. Actual compensation within this range will be based on a variety of factors, including relevant experience, knowledge, skills, and applicable certifications. This range reflects what we reasonably expect to offer based on current market data.

Job description only reflects management’s assignment of essential functions. Management reserves the right to assign or reassign duties and responsibilities to this job at any time. This job description in no way states or implies that these are the only duties to be performed by the employee(s) currently in this position. Employee(s) will be required to follow any other job related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments.

A review of this position has excluded the marginal functions of the position that are incidental to the performance of fundamental job duties. All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbent(s) will possess the skills, aptitudes, and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others. The requirements listed in this document are the minimum levels of knowledge, skills, or abilities. This document does not create an employment contract, implied or otherwise, other than an "at-will" relationship.

Re:Sources USA is an Equal Opportunity / Affiliation employer. All qualified applicants to Re:Sources USA will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.