Cybersecurity Incident Investigator

Investigate advanced cyber threats across cloud, identity, and hybrid systems from anywhere in Canada through a flexible remote model.As a Cybersecurity Incident Investigator at Kyndryl, you will lead end-to-end investigations beyond basic alert triage. You will analyze SIEM telemetry, forensic artifacts, network data, and operating system internals across Windows and Linux. Your findings will clarify attack timelines, initial access vectors, root causes, business risks, regulatory implications, and confidentiality impacts for leadership.Key Responsibilities:
Investigate malware, ransomware, credential theft, and business email compromiseExamine evidence across cloud, identity, and hybrid platformsDetermine attack timelines, initial access vectors, and root causesAssess business, compliance, regulatory, and confidentiality impactsDeliver executive-ready reports and brief non-technical stakeholdersRequirements:
Hold or qualify for Government of Canada Level 2 clearanceBe legally authorized to work in CanadaDemonstrate hands-on incident response or digital forensics experienceKnow Microsoft Entra ID, Active Directory, and hybrid cloud securityCommunicate technical findings clearly to business leadershipApply investigative expertise across digital forensics, identity security, SIEM analysis, and complex incident response at Kyndryl.
#J-18808-Ljbffr