Senior Cyber Incident Response Consultant (DFIR)

Forensic Focus; Canada; Remote; CAD 180,000 - 207,000; Full time

Job summary

Forensic Focus is seeking a Senior Cyber Incident Response Consultant (DFIR) in Canada. This role leads high-impact investigations, performing forensic analysis across hosts, networks and memory to determine attacker actions and impact.

You will collect defensible evidence, brief stakeholders, and participate in readiness assessments and tabletop exercises, while on an on-call rota. Ideal candidates have advanced forensic skills across Windows, Linux, macOS and multi-cloud platforms, memory

Qualifications

• Requires advanced forensic skills across Windows, Linux, macOS and multi-cloud platforms, memory forensics, log and network traffic analysis, EDR/SIEM proficiency, Active Directory knowledge, chain-of-custody practices, and scripting for investigation automation.

Responsibilities

• Leads high-impact cyber incident investigations, performing forensic analysis of hosts, networks and memory to determine attacker actions and impact.
• Collects defensible evidence, briefs stakeholders, conducts readiness assessments and tabletop exercises, and participates in an on-call rota.

Job description

# Senior Cyber Incident Response Consultant (DFIR)*The Tech Recruiter***Ontario**Remote · Senior · Full-time · CA$180,000.00/yr - CA$207,000.00/yr### The RoleThis role leads high-impact cyber incident investigations, performing forensic analysis of hosts, networks and memory to determine attacker actions and impact. The consultant collects defensible evidence, briefs stakeholders, conducts readiness assessments and tabletop exercises, and participates in an on-call rota.### Skills & ExperienceRequires advanced forensic skills across Windows, Linux, macOS and multi-cloud platforms, memory forensics, log and network traffic analysis, EDR/SIEM proficiency, Active Directory knowledge, chain-of-custody practices, and scripting for investigation automation.### Who It SuitsIdeal for an experienced DFIR professional comfortable leading investigations, mentoring junior staff, and engaging confidently with technical and executive stakeholders during high-pressure incidents.Typical advertised salary forIncident Response roles in Canada:**C$95,000–C$162,000**(median C$130,000 — from55 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Canada →Learn More/Apply