Cybersecurity Analyst / Incident Response (IR) →

Cybersecurity Analyst / Incident Response (IR)

Location**:**Vaughan, ON (GTA)Employment Type: Full time / Permanent / Contract

Cyberwall is a cybersecurity services provider delivering advanced threat detection, digital forensics, and incident response services to organizations across Canada.

We are seeking a skilled and experienced CybersecurityAnalyst to join our growing security team in Vaughan.

This role is ideal for a hands on cybersecurity professional with strong investigative experience who can lead threat huntin, incident handling, perform deep technical analysis, and guide clients through containment and remediation efforts.

Key Responsibilities

• Lead and coordinate incident response activities across client environments
• Perform advanced investigation and analysis of security incidents, including malware outbreaks, ransomware, insider threats, and advanced persistent threats (APTs)
• Conduct host based and network based forensic investigations
• Analyze EDR/XDR telemetry, firewall logs, SIEM data, and cloud security alerts
• Develop containment, eradication, and recovery strategies
• Provide root cause analysis and detailed post incident reporting
• Support proactive threat hunting initiatives
• Identify gaps in detection capabilities and recommend improvements
• Collaborate with SOC, engineering, and client IT teams during active incidents
• Assist in developing and refining incident response playbooks and procedures
• Stay current with emerging threats, attack techniques, and vulnerability trends

Technical Requirements

• Strong experience with EDR/XDR platforms (SentinelOne or similar)
• Hands on experience with SIEM platforms and log correlation
• Experience investigating Windows, Linux, and cloud based environments
• Solid understanding of network protocols (TCP/IP, DNS, VPNs) and network security architecture
• Experience with firewall and IPS technologies
• Knowledge of MITRE ATT&CK framework and attacker tactics, techniques, and procedures (TTPs)
• Familiarity with forensic tools and methodologies
• Ability to analyze logs in formats such as JSON, Syslog, and CEF
• Scripting capability (PowerShell, Python, or similar) is an asset

Qualifications

• 3+ years of experience in cybersecurity, with strong focus on Threat hunting and Incident Response
• Experience in MSSP, SOC, consulting, or enterprise security environments
• Demonstrated experience handling real world security incidents end to end
• Strong knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
• Experience with ransomware investigations and containment strategies
• Excellent analytical, documentation, and communication skills
• Ability to remain composed and decisive during high severity incidents

What We Offer

• Opportunity to work on complex, real world security incidents
• Exposure to diverse client environments and advanced threat scenarios
• Growth opportunities within a rapidly expanding cybersecurity firm
• Collaborative and technically driven team environment