Cybersecurity Analyst / Incident Response (IR)

Location:Vaughan, ON (GTA)Employment Type: Full time / Permanent / Contract

Cyberwall is a cybersecurity services provider delivering advanced threat detection, digital forensics, and incident response services to organizations across Canada.

We are seeking a skilled and experienced CybersecurityAnalyst to join our growing security team in Vaughan.

This role is ideal for a hands on cybersecurity professional with strong investigative experience who can lead threat huntin, incident handling, perform deep technical analysis, and guide clients through containment and remediation efforts.

Key Responsibilities

- Lead and coordinate incident response activities across client environments
- Perform advanced investigation and analysis of security incidents, including malware outbreaks, ransomware, insider threats, and advanced persistent threats (APTs)
- Conduct host based and network based forensic investigations
- Analyze EDR/XDR telemetry, firewall logs, SIEM data, and cloud security alerts
- Develop containment, eradication, and recovery strategies
- Provide root cause analysis and detailed post incident reporting
- Support proactive threat hunting initiatives
- Identify gaps in detection capabilities and recommend improvements
- Collaborate with SOC, engineering, and client IT teams during active incidents
- Assist in developing and refining incident response playbooks and procedures
- Stay current with emerging threats, attack techniques, and vulnerability trends





Technical Requirements

- Strong experience with EDR/XDR platforms (SentinelOne or similar)
- Hands on experience with SIEM platforms and log correlation
- Experience investigating Windows, Linux, and cloud based environments
- Solid understanding of network protocols (TCP/IP, DNS, VPNs) and network security architecture
- Experience with firewall and IPS technologies
- Knowledge of MITRE ATT&CK; framework and attacker tactics, techniques, and procedures (TTPs)
- Familiarity with forensic tools and methodologies
- Ability to analyze logs in formats such as JSON, Syslog, and CEF
- Scripting capability (PowerShell, Python, or similar) is an asset

Qualifications

- 3+ years of experience in cybersecurity, with strong focus on Threat hunting and Incident Response
- Experience in MSSP, SOC, consulting, or enterprise security environments
- Demonstrated experience handling real world security incidents end to end
- Strong knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
- Experience with ransomware investigations and containment strategies
- Excellent analytical, documentation, and communication skills
- Ability to remain composed and decisive during high severity incidents

What We Offer
- Prospect to work on complex, real world security incidents
- Exposure to diverse client environments and advanced threat scenarios
- Growth opportunities within a rapidly expanding cybersecurity firm
- Collaborative and technically driven team environment

📌 Cybersecurity Analyst / Incident Response (IR) → (Vaughan)
🏢 Cyberwall
📍 Vaughan