Senior Incident Response Analyst, MDR

Team: IT

Location: Canada

Commitment: Full-time

Workplace Type: remote

Accountabilities

• Lead complex incident investigations involving advanced adversaries, multi-vector intrusions, and compromise across multiple environments.

• Serve as the primary Incident Advisor or designated Commander for high-severity and critical security engagements.

• Direct investigative, forensic, and containment activities across multiple analysts and response teams.

• Establish investigation strategies, priorities, and containment approaches based on business risk, technical findings, and incident impact.

• Validate, correlate, and synthesize technical findings into clear and actionable recommendations for customers and internal stakeholders.

• Provide technical leadership, mentorship, and oversight to incident response and security operations analysts.

• Collaborate with SOC, Threat Intelligence, and Detection Engineering teams to validate detections, identify visibility gaps, and improve defensive capabilities.

• Lead or contribute to post-incident reviews and translate lessons learned into improvements to playbooks, tools, processes, and response workflows.

• Maintain accurate records of time and activities to support operational visibility, resource planning, and capacity management.

• Communicate effectively with customer stakeholders, including senior and executive-level audiences, throughout critical incidents.

Requirements

• At least 5 years of professional experience in incident response, managed detection and response, cybersecurity investigations, or a closely related field, including leadership of complex incidents.

• Advanced expertise in endpoint and network forensics, log analysis, and adversary tactics, techniques, and procedures.

• Strong understanding of enterprise network architecture, IT infrastructure, and security environments.

• Proven ability to lead investigations, validate technical findings, assess risk, and develop effective containment strategies.

• Experience translating complex technical findings into concise, actionable guidance for customers and senior stakeholders.

• Demonstrated ability to mentor analysts and provide technical leadership within incident response or security operations teams.

• Strong decision-making, analytical, and problem-solving skills, with the ability to operate effectively under pressure and within time-sensitive situations.

• Strong customer-facing communication and presentation skills, including the ability to brief executive audiences during security incidents.

• Willingness to participate in an occasional weekend and holiday rotation.

• Advanced incident response or digital forensics certifications such as GCFA, GCED, GCIH, OSCP, or equivalent are an asset.

• Experience serving as an Incident Advisor or Commander during critical engagements is an asset.

• Cybersecurity publications, presentations, community contributions, or other recognized industry involvement are considered an advantage.

• Experience influencing detection strategies, security tooling, or cybersecurity service design is an asset.

Benefits

• Base salary ranging from $131,000 to $219,000 CAD per year.

• Additional compensation opportunities, including bonus eligibility.

• Comprehensive employee benefits package.

• Remote-first working model, with remote work as the primary option for most positions.

• Employee-led diversity and inclusion networks supporting community, education, and advocacy.

• Paid volunteer days and opportunities to participate in charitable and fundraising initiatives.

• Employee sustainability initiatives supporting environmental responsibility.

• Global fitness and trivia activities.

• Global wellbeing days and monthly wellbeing webinars and training.

• Inclusive work environment with accommodations available throughout the recruitment and selection process.

• Opportunity to work on advanced cybersecurity investigations and collaborate with specialists across incident response, threat intelligence, SOC, and detection engineering.