Arobas Personnel is looking for an experienced DFIR / Incident Response Specialist for a contract prospect with one of our clients.The specialist will support the Digital Forensics & Incident Response (DFIR) team in investigating and responding to security incidents, conducting forensic analysis, and supporting containment, eradication, and recovery activities.Key Responsibilities

Investigate and respond to security incidents across the organization’s environmentTriage and investigate security alerts escalated by the SOC into confirmed incidentsPerform digital forensic analysis on compromised or suspicious systems, including endpoint, network, memory, and cloud environmentsEstablish root cause, scope, and incident timelines through forensic analysisCollect and preserve forensic evidence following chain‑of‑custody proceduresIdentify

Indicators of Compromise (IOCs) and adversary TTPs and share findings with CTI and Detection Engineering teamsSupport containment, eradication, and recovery activities in coordination with IT and infrastructure teamsDraft incident reports and post-incident reviews, including root cause analysis and remediation recommendationsContribute to and refine





Incident Response playbooks and runbooksCollaborate with

SOC, CTI, Detection Engineering, and Red Team stakeholders on incident handling and lessons learnedKey Deliverables

Completed incident investigations with documented timelines, root cause, and impact assessmentsForensic evidence packages, including disk, memory, network, and cloud artifacts, preserved according to chain‑of‑custody standardsIOC and TTP reporting to support CTI and Detection Engineering improvementsPost-incident reports including remediation and lessons-learned recommendationsUpdated and refined

Incident Response playbooks and runbooksKey Expertise

Digital Forensics & Incident Response (DFIR)Security incident investigation and responseEndpoint, network, memory, and cloud forensic analysisForensic evidence collection and preservationIOC and TTP identificationIncident containment, eradication, and recoveryIncident reporting and root cause analysisId 10060Emplacement MontréalDurée De L'emploi Temps PleinNombre D'emplois Vacants 1Date Limite De DépôtDernière mise à jour: 26-11-04 15:25

📌 Dfir / Incident Response Specialist (Winnipeg)
🏢 Arobas Personnel
📍 Winnipeg