Senior DFIR Incident Response Lead

Forensic Focus Limited; Canada; Hybrid; CAD 95,000 - 158,000; Full time

Job summary

Forensic Focus Limited seeks a Senior Cyber Consultant to lead end-to-end incident response engagements in a Canada-based role. You will conduct forensic examinations of servers, workstations, and SaaS platforms, preserve evidence, analyze logs, and deliver detailed reports to diverse audiences.

Strong communication and independent work ethic are essential. Required experience in DFIR, proficiency with X-Ways, and familiarity with NIST/SANS frameworks and cloud platforms such as Azure, AWS, GCP,

Qualifications

• Proven DFIR experience and hands-on proficiency with forensic tooling such as X-Ways.
• Familiarity with IR frameworks (NIST, SANS), cloud platforms (Azure, AWS, GCP, Oracle).
• Strong written and verbal communication skills; industry-recognised certifications preferred.

Responsibilities

• Lead end-to-end incident response engagements from identification to recovery.
• Perform forensic examination of servers, workstations, and SaaS platforms.
• Preserve evidence, analyze logs, and author detailed narrative reports for technical and non-technical audiences.

Skills

DFIR experience

IR frameworks

Cloud platforms

Python

PowerShell

Communication skills

Independent work

Client coordination

Tools

X-Ways

Job description

Forensic Focus Limited seeks a Senior Cyber Consultant to lead end-to-end incident response engagements in a Canada-based role. You will conduct forensic examinations of servers, workstations, and SaaS platforms, preserve evidence, analyze logs, and deliver detailed reports to diverse audiences.

Strong communication and independent work ethic are essential. Required experience in DFIR, proficiency with X-Ways, and familiarity with NIST/SANS frameworks and cloud platforms such as Azure, AWS, GCP,