Investigate escalated cybersecurity incidents using live response analysis and EDR tools within a banking setting. Develop timelines and contain threats during complex investigations. This mid-level analyst investigates breach-class events for a large financial institution’s security operations function.

The work includes incident response, digital forensics, host activity timeline development, and incident reporting. Collaboration with internal security teams and external providers supports operational readiness.

Key Responsibilities

- Investigate escalated cybersecurity incidents within banking environments
- Perform live response analysis during breach-class events
- Develop host activity timelines for investigations




- Contain threats using endpoint detection and response tools
- Prepare incident reports and collaborate with security providers Requirements:
- Three to four years in security operations and incident response
- Experience investigating cybersecurity breaches
- Two to three years in digital forensics
- Experience using endpoint detection and response tooling
- Strong analytical, documentation, and communication skills Apply incident response, digital forensics, and EDR expertise to complex enterprise-scale investigations within financial security operations.

📌 Cybersecurity Incident Response Analyst (Toronto)
🏢 Forensic Focus
📍 Toronto