We're Hiring: Incident Response Specialist – Cybersecurity

Location:
Toronto, Scarborough, or Barrie, ON (Hybrid
- 2 days/week) Contract Prospect
- 1 Year with potential to extend Pay Rate:
- T4
- $38.51
- INC
- $43.71 Work Arrangement & Schedule
- Hybrid work model with offices in Downtown Toronto, Scarborough, or Barrie.
- Four 10-hour shifts per week.
- Shift hours: 10:20 AM – 8:20 PM EST.
- Available rotations: Sunday–Wednesday or Wednesday–Saturday.
- Two in-office days per week.
- Weekend and statutory holiday coverage is required.
- Shift assignments are determined by business requirements. What You'll Be Doing
- Investigate and respond to escalated Level 2 cybersecurity incidents, including complex security breaches.
- Conduct digital forensic investigations, live response analysis, and endpoint activity reviews.
- Leverage Endpoint Detection and Response (EDR) tools to identify, investigate, contain, and mitigate security threats.
- Develop host activity timelines and analyze forensic evidence to determine the scope and impact of incidents.
- Prepare detailed incident reports, investigation findings, and technical documentation.




- Coordinate incident response activities with internal security teams and external technology partners.
- Monitor, maintain, and support enterprise security tools and applications.
- Identify opportunities to improve incident response processes, operational procedures, and security capabilities. What We're Looking For
- 3–4 years of experience in Security Operations, Cybersecurity, or Incident Response.
- 3–4 years of experience investigating and responding to security breaches.
- 3–4 years of hands-on experience with EDR tools and endpoint threat investigations.
- 2–3 years of experience in Digital Forensics and forensic analysis.
- Experience conducting live response investigations and developing host activity timelines.
- Experience preparing incident response reports and operational documentation.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal communication skills.
- Post-secondary education in Computer Science, Information Technology, Business, or a related discipline, or equivalent practical experience. Relevant cybersecurity certifications (CISSP, CISM, CISA, SANS, or similar) are considered an asset.

📌 Incident Response Specialist (Toronto)
🏢 Swoon
📍 Toronto