# DFIR Manager*Connect-AI***Canada**Remote · Manager · Full-time### The RoleThis position involves leading complex incident response engagements from triage through containment and remediation, covering ransomware, business email compromise, insider threats and cloud compromises. The manager performs hands-on forensic analysis while acting as senior technical liaison to clients, legal counsel and executives.### Skills & ExperienceCandidates need 6+ years of DFIR experience, strong endpoint, network and cloud forensics skills, and familiarity with EDR/XDR tools like CrowdStrike, SentinelOne or Defender, plus SIEM platforms, chain of custody practices and NIST incident response frameworks.### Who It SuitsIdeal for an experienced incident responder from a consulting or professional services background who wants to blend technical investigation with team mentorship, client leadership and broader strategic ownership.
Typical advertised salary forIncident Response roles in Canada:**C$95,000–C$162,000**(median C$130,000 — from55 recent listings analysed by Forensic Focus).
DFIR Manager in Ottawa employer: Forensic Focus
At Tech Recruiter, we pride ourselves on being an exceptional employer that fosters a collaborative and innovative work culture. As a Lead Cyber Incident Response Consultant, you will not only lead high-impact investigations but also have the opportunity to mentor junior team members, enhancing your leadership skills while working remotely. Our commitment to employee growth, coupled with a focus on advanced forensic analysis, ensures that you will thrive in a dynamic environment that values your expertise and contributions.
