Sr. Consultant - Enterprise Incident Management (Cybersecurity)

Location: Fully remote anywhere in Canada except Quebec; must be able to respond onsite in a 24/7/365 environment and travel 25–40% to client sites. Evening, overnight, weekend, and holiday hours may be required.

Salary: $116,600–$159,900 annual, with potential eligibility for a variable incentive-based bonus plan.

Company

hirify.global provides cybersecurity consulting and enterprise incident management services.

What you will do

• Lead and independently deliver complex incident response, digital forensics, threat hunting, compromise assessment, and incident readiness engagements.
• Serve as the primary technical lead and client-facing advisor during ransomware, business email compromise, cloud compromise, insider threat, and unauthorized access investigations.
• Lead evidence collection and preservation, forensic analysis, threat scoping, root cause analysis, remediation planning, and threat-hunting activities across endpoint, network, cloud, identity, and security telemetry.
• Develop and facilitate incident response plans, playbooks, readiness assessments, tabletop exercises, and security program maturity reviews.
• Present technical findings, executive briefings, remediation recommendations, and final reports; manage engagement planning, execution, communications, and client delivery.
• Provide technical escalation support, peer review, quality assurance, mentoring, knowledge sharing, and improvements to service offerings, methodologies, automation, detection content, and operational processes.

Requirements

• Bachelor’s degree and approximately 5–8 years of related cybersecurity, digital forensics, incident response, threat hunting, or consulting experience.
• At least 5 years of hands-on incident response experience covering containment, eradication, recovery, digital forensics, root cause analysis, and remediation.
• Experience leading cybersecurity investigations and client-facing consulting engagements.
• Experience developing and conducting incident response plans, playbooks, tabletop exercises, readiness assessments, and security program maturity assessments.
• Strong understanding of networking, including TCP/IP, DNS, DHCP, routing, firewalls, VPNs, IDS/IPS technologies, and cloud networking.
• Strong understanding of Windows, Linux, macOS, virtualization platforms, cloud environments, Active Directory, Entra ID, and enterprise identity technologies.
• Experience with digital forensics, EDR, SIEM, and investigative platforms, including Velociraptor, CrowdStrike, Microsoft Defender, SentinelOne, Carbon Black, Splunk, Microsoft Sentinel, X-Ways, FTK, EnCase, Volatility, and KAPE.
• Knowledge of adversary tactics, techniques, and procedures, with familiarity with MITRE ATT&CK and NIST Incident Response guidance.
• Understanding of regulatory, privacy, and compliance requirements, including PCI DSS, GLBA, HIPAA, NIST, state data privacy laws, and other industry-specific frameworks.
• Strong written, presentation, and communication skills; ability to explain complex technical findings to technical and executive audiences, build trusted client relationships, manage multiple engagements, and make sound decisions under pressure.

Nice to have

• GIAC Certified Forensics Examiner (GCFE), GIAC Certified Incident Handler (GCIH), EC-Council Certified Incident Handler (ECIH), or Certified Computer Forensics Examiner (CCFE) certification.

Culture & Benefits

• Fully remote work from home within Canada, except Quebec, with the technology needed to work productively.
• Work/life balance and professional training resources.
• Creative problem-solving on unique and complex projects.
• Employee Resource Groups supporting diversity, equality, and inclusion.
• Volunteer opportunities through the hirify.global Chips In program.