Cybersecurity Team Lead (DFIR)

Tasks/Responsibilities

The DFIR Cybersecurity Team Lead (Digital Forensics and Incident Response) will be responsible for leading an IT team specialized in cybersecurity incident response and forensic analysis, while handling the most complex cases.

MORE PRECISELY

• Manage complex, high-stakes cybersecurity incidents
• Assign mandates across specialists and ensure deadlines are met
• Perform forensic analysis of workstations, servers and network devices
• Coordinate the response with clients, insurers and Breach Coaches
• Review the technical reports delivered to clients
• Improve internal incident response processes and tools
• Lead a team of about 4 people, including 2 direct reports
• Work in an environment based on Volatility, Wireshark and MITRE ATT&CK

PROFILE

• 5+ years of professional experience in DFIR, including 1+ year in management
• Strong command of malware analysis (static and dynamic)
• Good knowledge of TTPs (tactics, techniques and procedures)
• Expertise in Windows, Mac and Linux systems
• Experience with Azure, Amazon Web Services and Google Cloud Platform
• Knowledge of reverse engineering (asset)
• Inspiring leadership and a knack for mentoring
• Comfortable communicating with senior management during a crisis
• GCFA (GIAC Certified Forensic Analyst) certification or equivalent (asset)
• Availability on short notice and outside business hours
• Bachelor’s degree in computer science or equivalent
• Bilingualism required (French and English)