Cybersecurity Incident Investigator

Job not on LinkedIn

🔥 1 minute ago

🇨🇦 Canada – Remote

💵 $118.7k - $168.7k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 22 days.

Apply Now

Find Similar Remote Jobs

Kyndryl

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2021

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Kyndryl is a leading IT infrastructure services provider, serving thousands of enterprise customers worldwide. The company specializes in designing, building, managing, and modernizing complex, mission-critical information systems. Kyndryl offers a range of services including IT consulting, cloud services, cybersecurity, data and AI solutions, and digital workplace transformation. With a strong focus on innovation, partnerships, and co-creation, Kyndryl helps businesses tackle IT complexity and drive operational excellence. The company operates across various industries such as automotive, healthcare, banking, and more, providing expertise and solutions to address industry-specific challenges. Kyndryl's global network and strategic alliances empower enterprises to adapt to the evolving technology landscape, ensuring their essential systems are reliable and efficient.

📋 Description

• Conduct deep-dive, end-to-end cybersecurity investigations across cloud, identity, and hybrid systems • Investigate, contain, and resolve complex security events • Investigate advanced threats including malware, ransomware, credential theft, business email compromise, insider threats, and potential data exposure • Examine evidence across multiple platforms • Determine root cause and initial access vectors • Assess business, compliance, regulatory, and confidentiality risks • Piece together attack timelines from raw technical evidence • Deliver defensible root-cause determinations and actionable recommendations to leadership • Produce clear, executive-ready investigation reports • Brief technical and non-technical stakeholders during high-severity events • Collaborate with cross-functional technical teams, executive leaders, and regulatory stakeholders across Canada • Use modern threat detection and forensic technologies to support operational resilience and protect digital assets

🎯 Requirements

• Must hold, or be strictly eligible to obtain and maintain, a Government of Canada Security Clearance (Level 2 - Secret / Protected B) • Must be legally authorized to work in Canada • Proven track record and hands-on experience in cybersecurity incident response, digital forensics, or complex security investigations • Experience conducting end-to-end investigations rather than basic alert triage • Strong expertise with Microsoft Entra ID (Azure AD), Active Directory, and hybrid cloud security • Experience analyzing SIEM telemetry, forensic artifacts, network data, and operating system internals across Windows and Linux • Ability to establish defensible attack timelines, initial access vectors, and root-cause determinations • Experience assessing business risk, regulatory implications, and confidentiality impact • Ability to produce executive-ready investigation reports and brief non-technical stakeholders during high-severity events • Ability to work autonomously in a remote, distributed team across Canadian time zones • Fluency in French • Knowledge of English required for regular work with Kyndryl stakeholders • Relevant industry certifications such as GIAC GCFE, GCFA, GCIH, GNFA, or CISSP (preferred) • Hands-on experience with Velociraptor, FTK, EnCase, Volatility, KAPE, and modern EDR/XDR platforms (preferred) • Understanding of threat intelligence and MITRE ATT&CK (preferred)

🏖️ Benefits

• Flexible, supportive remote work environment • Well-being support through Be Well programs for financial, mental, physical, and social health • Personalized development goals and continuous feedback • Certifications with Microsoft, Google, and Amazon • Coaching and hands-on learning experiences • Cutting-edge learning opportunities • Career-path tools and professional development support • Performance-based incentives and discretionary bonuses may be included • Other perks and rewards may be included in the total compensation package

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume