Cybersecurity Incident Response Investigator

Investigate advanced cyber threats remotely across Canada using digital forensics, identity security, and hybrid cloud expertise. Lead end-to-end investigations beyond basic alert triage.At Kyndryl, the Cybersecurity Incident Investigator supports CIO Incident Response & Forensics across mission-critical enterprise environments. You will investigate malware, ransomware, credential theft, business email compromise, insider threats, and potential data exposure. Your work includes analyzing evidence, establishing timelines, identifying initial access vectors, and determining root cause.Key Responsibilities:
Conduct end-to-end cybersecurity investigations across cloud, identity, and hybrid systemsAnalyze SIEM telemetry, forensic artifacts, network data, and operating systemsAssess business, regulatory, and confidentiality impacts during security eventsProduce executive-ready reports and brief non-technical stakeholdersProvide actionable recommendations to leadership after investigationsRequirements:
Hands-on cybersecurity incident response, digital forensics, or investigations experienceExpertise with Microsoft Entra ID, Active Directory, and hybrid cloud securityAbility to determine attack timelines, access vectors, and root causesGovernment of Canada Level 2 Secret or Protected B clearance eligibilityFluency in French and knowledge of English requiredApply investigative judgment, digital forensics, and identity security expertise to protect Kyndryl’s enterprise environments across Canada.
#J-18808-Ljbffr