Lead cyber threat investigations at QFG through Elastic Security, CrowdStrike Falcon, and full incident response lifecycle management. The schedule runs 3 pm to 11 pm, Monday to Friday.

As a Senior Cybersecurity Specialist, Incident Response, you will support alert development, threat hunting, and measurable security operations. The work includes triaging alerts, investigating indicators, managing containment and recovery, and collaborating with Cybersecurity, IT, vendors, and internal customers. You will also improve processes, tools, and documentation.

Key Responsibilities:

- Monitor, analyze, and report possible cybersecurity attacks
- Investigate threat indicators and gather compromise evidence
- Execute containment and eradication actions using established playbooks




- Document timelines, evidence, actions, and lessons learned
- Own SOC metrics including MTTD, MTTR, and alert fidelity

Requirements:

- Five or more years in incident response and threat hunting
- Experience creating and fine-tuning detection rules
- Experience with CrowdStrike Falcon and Elastic Security
- Forensic triage experience across Mac, Linux, and Windows
- Knowledge of NIST Cybersecurity Framework and MITRE ATT&CK;

Apply senior incident response expertise across threat hunting, detection engineering, investigations, and SOC metrics at QFG.

📌 Senior Incident Response Specialist (Toronto)
🏢 Questrade Financial Group
📍 Toronto