Cybersecurity Analyst / Incident Response (Ir) →

Cybersecurity Analyst / Incident Response (IR)Location**:**Vaughan, ON (GTA)Employment Type: Full time / Permanent / Contract
Cyberwall is a cybersecurity services provider delivering advanced threat detection, digital forensics, and incident response services to organizations across Canada.
We are seeking a skilled and experienced CybersecurityAnalyst to join our growing security team in Vaughan.
This role is ideal for a hands on cybersecurity professional with strong investigative experience who can lead threat huntin, incident handling, perform deep technical analysis, and guide clients through containment and remediation efforts.
Key Responsibilities
Lead and coordinate incident response activities across client environments
Perform advanced investigation and analysis of security incidents, including malware outbreaks, ransomware, insider threats, and advanced persistent threats (APTs)
Conduct host based and network based forensic investigations
Analyze EDR/XDR telemetry, firewall logs, SIEM data, and cloud security alerts
Develop containment, eradication, and recovery strategies
Provide root cause analysis and detailed post incident reporting
Support proactive threat hunting initiatives
Identify gaps in detection capabilities and recommend improvements
Collaborate with SOC, engineering, and client IT teams during active incidents
Assist in developing and refining incident response playbooks and procedures
Stay current with emerging threats, attack techniques, and vulnerability trends
Technical Requirements
Strong experience with EDR/XDR platforms (SentinelOne or similar)
Hands on experience with SIEM platforms and log correlation
Experience investigating Windows, Linux, and cloud based environments
Solid understanding of network protocols (TCP/IP, DNS, VPNs) and network security architecture
Experience with firewall and IPS technologies
Knowledge of MITRE ATT&CK framework and attacker tactics, techniques, and procedures (TTPs)
Familiarity with forensic tools and methodologies
Ability to analyze logs in formats such as JSON, Syslog, and CEF
Scripting capability (PowerShell, Python, or similar) is an asset
Qualifications
3+ years of experience in cybersecurity, with strong focus on Threat hunting and Incident Response
Experience in MSSP, SOC, consulting, or enterprise security environments
Demonstrated experience handling real world security incidents end to end
Strong knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
Experience with ransomware investigations and containment strategies
Excellent analytical, documentation, and communication skills
Ability to remain composed and decisive during high severity incidents
What We Offer
Opportunity to work on complex, real world security incidents
Exposure to diverse client environments and advanced threat scenarios
Growth opportunities within a rapidly expanding cybersecurity firm
Collaborative and technically driven team environment
#J-18808-Ljbffr