The RoleThis position sits within a forensic services practice focused on fraud, misconduct, and cybercrime investigations. Day to day, practitioners collect and analyse digital evidence across Windows, Linux, virtualised, and cloud environments, lead incident containment and eradication, and support enterprise infrastructure recovery during active ransomware engagements. Skills & ExperienceCandidates should have hands-on experience with EDR platforms such as CrowdStrike Falcon, virtualisation technologies including VMware and Hyper-V, and cloud environments such as Azure and Microsoft 365. Familiarity with domain controller rebuilds and forensic imaging methodologies is essential. Relevant certifications in digital forensics or incident response are advantageous. Who It SuitsThis role suits a technically grounded practitioner who thrives under pressure and moves comfortably between deep forensic analysis and explicit communication with legal counsel. Someone equally confident working overnight on a compromised host and presenting findings to a non-technical audience the following morning will excel here.

📌 Consulting Associate/Recovery Services (Forensic Services Practice) (Toronto)
🏢 Forensic Focus
📍 Toronto