Incident Response Specialist

Job Title: Incident Response Specialist
Contract Duration: 12 Months
Work Model: Hybrid – Downtown Toronto, Scarborough, or Barrie
Shift Schedule: 4 days per week, 10-hour shifts
Shift Hours: 10:30 AM – 8:20 PM EST

Position Overview

We are seeking a Cyber Security Incident Response professional to join an established Information Security team. This opportunity involves supporting enterprise-level cybersecurity operations, investigating security breaches, conducting digital forensic analysis, and responding to complex cyber incidents.

The successful candidate will work with advanced Endpoint Detection and Response (EDR) technologies, support threat containment and mitigation activities, and contribute to strengthening the organization's overall security capabilities.

Key Responsibilities

• Monitor, support, and maintain mission-critical Information Security systems and applications.

• Investigate and respond to cybersecurity incidents, including breach-class incidents.

• Perform digital forensic investigations and forensic analysis to identify suspicious activities and security threats.

• Utilize Endpoint Detection and Response (EDR) tools to investigate, monitor, and respond to endpoint security incidents.

• Conduct live response analysis and develop detailed host activity timelines.

• Coordinate incident management activities, including engaging internal teams and third-party providers.

• Support threat containment, mitigation, recovery, and incident resolution activities.

• Develop and maintain incident response documentation, operational procedures, and security reports.

• Monitor and maintain security tools and applications.

• Identify opportunities to improve security processes, operational efficiency, and incident response capabilities.

• Collaborate with internal and external stakeholders to support Information Security operations.

• Ensure activities comply with organizational security policies, industry best practices, and regulatory requirements.

Required Technical Skills

• 3–4 years of experience in Security Operations and Incident Response.

• 3–4 years of experience investigating breach-class security incidents.

• 2–3 years of experience in Digital Forensics and forensic analysis.

• 3–4 years of experience using EDR tools for incident investigation and response.

• 3–4 years of experience developing and assessing operational process documentation.

• 3–4 years of experience in live response analysis and host activity timeline development.

• 2–3 years of experience preparing incident response reports.

Preferred Technical Exposure

• CrowdStrike Falcon

• Microsoft Defender for Endpoint

• SentinelOne

• Carbon Black

• Splunk

• Endpoint Forensics

• Threat Investigation

• Malware Analysis

• MITRE ATT&CK Framework

• Digital Evidence Collection and Analysis

Qualifications

• Post-secondary degree in Business, Computer Science, Information Security, or a related discipline, or equivalent education and experience.

• Typically 2–4 years of relevant professional experience.

• Industry-recognized cybersecurity certifications are preferred, including certifications from ISC2, ISACA, or SANS.

• Strong understanding of Information Security operations, processes, procedures, and controls.

• Experience supporting enterprise IT operations and security platforms.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent verbal and written communication skills.

• Ability to work independently and collaborate effectively with cross-functional teams.

Work Schedule and Shift Details

This position follows a compressed work schedule consisting of four 10-hour shifts per week.

Shift hours: 10:30 AM – 8:20 PM EST

The assigned shift will be either:

• Sunday – Wednesday

• Wednesday – Saturday

Shift assignments are determined by business requirements and leadership. Weekend and statutory holiday coverage is required unless vacation time has been booked.

What Makes This Opportunity Stand Out?

• Join a mature cybersecurity incident response program at a leading financial institution.

• Work on real-world cyber investigations involving threat containment, mitigation, and digital forensics.

• Gain exposure to enterprise-scale security operations and advanced EDR technologies.

• Contribute to initiatives that strengthen organizational cybersecurity capabilities.

• Hybrid work flexibility across Downtown Toronto, Scarborough, and Barrie offices.

Applicant Notices & Disclaimers

• For information on benefits, equal opportunity employment, and location-specific applicant notices, click here

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. The pay rate for this position is C$40.00/hr.