Senior Incident Response Consultant 2

Forensic Focus Limited; Canada; Hybrid; CAD 95,000 - 158,000; Full time

Job summary

Forensic Focus Limited in Canada is seeking a Senior Incident Response Consultant to lead end-to-end DFIR engagements for organisations that have suffered cyberattacks. You will run customer-facing calls, delegate investigations, coordinate with legal and insurers, and deliver executive summaries with MITRE ATT&CK-mapped timelines.

The role requires deep expertise across computer, network, cloud, memory and email forensics, with proven incident response leadership on high-profile incidents.

Qualifications

• Must have deep expertise across computer, network, cloud, memory and email forensics.
• Proven incident response leadership on high-profile incidents.
• Familiarity with threat hunting, OSINT, web app security and pentesting is valued.

Responsibilities

• Lead end-to-end incident response engagements for cyberattacks.
• Run customer-facing calls and coordinate with legal and insurers.
• Delegate investigative tasks and produce executive summary reports with timelines and remediation guidance.
• Maintain MITRE ATT&CK-mapped timelines in client deliverables.

Skills

DFIR leadership

Incident response

Cloud forensics

Memory forensics

Network forensics

Email forensics

Threat hunting

Tools

Forensic tooling

MITRE ATT&CK mapping

Job description

# Senior Incident Response Consultant 2*Sophos***Canada**Senior · Full-time### The RoleThis senior consulting position sits within an elite DFIR team, leading end-to-end incident response engagements for organisations that have suffered cyberattacks. Day-to-day responsibilities include running customer-facing calls, delegating investigative tasks, coordinating with legal and insurance stakeholders, and producing executive summary reports with MITRE ATT&CK-mapped timelines and remediation guidance.### Skills & ExperienceCandidates should bring strong expertise across computer, network, cloud, memory and email forensics, alongside proven incident response leadership on high-profile incidents. Familiarity with threat hunting, OSINT, web application security, and penetration testing is valued. Experience with Sophos technologies and industry-standard forensic tooling is advantageous.### Who It SuitsThis role suits a seasoned DFIR professional who combines deep technical forensic knowledge with the communication and leadership skills needed to manage both technical teams and senior client stakeholders under pressure. Those comfortable operating in fast-moving, high-stakes incident environments will thrive here.Typical advertised salary forIncident Response roles in Canada:**C$95,000–C$158,000**(median C$130,000 — from47 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Canada →Learn More/Apply