Senior Incident Response Consultant 2*Sophos***Canada**Senior · Full-time### The Role This senior consulting position sits within an elite DFIR team, leading end-to-end incident response engagements for organisations that have suffered cyberattacks.

Day-to-day responsibilities include running customer-facing calls, delegating investigative tasks, coordinating with legal and insurance stakeholders, and producing executive summary reports with MITRE ATT&CK-mapped; timelines and remediation guidance.### Skills & Experience Candidates should bring robust expertise across computer, network, cloud, memory and email forensics, alongside proven incident response leadership on high-profile incidents.

Familiarity with threat hunting, OSINT, web application security, and penetration testing is valued.



Experience with Sophos technologies and industry-standard forensic tooling is advantageous.### Who It Suits This role suits a seasoned DFIR professional who combines deep technical forensic knowledge with the communication and leadership skills needed to manage both technical teams and senior client stakeholders under pressure.

Those comfortable operating in fast-moving, high-stakes incident environments will thrive here.

Typical advertised salary for Incident Response roles in Canada:**C$95,000–C$158,000**(median C$130,000 — from47 recent listings analysed by Forensic Focus). Compare Incident Response salaries in Canada →Learn More/Apply

📌 Senior Incident Response Consultant 2 (Winnipeg)
🏢 Forensic Focus
📍 Winnipeg