Incident Response Senior Consultant (Remote, CAN)

Role overview Lead security incident investigations for organizations facing targeted attacks and complex breaches. The work combines hands-on host and network forensics, threat hunting, and malware review with customer leadership, clear reporting, and practical recovery guidance.

Responsibilities - Lead incident response engagements and coordinate work across consulting teams. - Investigate intrusions under outside counsel’s direction, using data analysis to identify attacker activity and determine the scope of compromise. - Conduct host and network forensics across Windows, macOS, and Linux systems, and perform basic malware analysis. - Develop tailored tactical and strategic remediation recommendations for affected organizations. - Present findings and recommendations to customer leaders, regulators, and legal counsel in written reports and briefings. - Contribute to industry knowledge through public writing and speaking.

Requirements - Relevant experience in one or more areas such as incident response, computer or network forensics, malware analysis, remediation, or secure network operations and architecture. - Experience conducting or managing investigations into targeted threats, such as advanced persistent threats, organized crime, or hacktivist activity. - Familiarity with forensic tools and network protocols; network analysis experience may include tools such as Zeek or Suricata. - Ability to lead teams in a consulting environment and communicate technical findings to both detailed and executive audiences. - Knowledge of cloud incident response methods in at least one major cloud environment is relevant. - Legal entitlement to work in Canada; selected applicants may undergo background checks.

Benefits and work setup - Remote role based in Canada, with a stated base salary range of CAD $100,000–$165,000, plus variable compensation, equity, and benefits. - Benefits include wellness programs, vacation and holidays, paid parental and adoption leave, and professional development opportunities.