logo inner

Sr. Cyber Analyst, Digital Forensics Incident Response

At-BayToronto, Ontario, CanadaOnsite

Why you should join our At-Bay Security team:


At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.With At-Bay, our customers experience 5X fewer ransomware attacks.

This is just the tip of the iceberg! Click here to learn more about what we're building. 

The Role:


  • Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:
  • Forensically sound collection, transmission, and storage of digital evidence
  • Analysis of digital evidence to identify indicators of compromise and adversary activity
  • Development of incident timelines and theories of compromise
  • Identification of incident root causes
  • Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
  • Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
  • Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
  • Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
  • Development and delivery of incident response training and simulations for targeted insureds

Key skills:


  • Previous digital forensics and incident response experience
  • Strong oral and written communication skills
  • Previous hands-on experience performing digital forensics and incident response, including several of the following:
  • Business Email Compromise
  • Ransomware
  • Digital evidence collection and analysis
  • Development and analysis of cyber threat intelligence
  • Leadership of or participation in investigations involving digital evidence
  • Intrusion detection / cyber threat hunting
  • Malware analysis
  • Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc. 
  • Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)

Minimum requirements:


  • Bachelor’s degree or equivalent
  • Minimum of 3 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
  • Willingness to travel as needed to perform job functions

Preferred requirements:


  • Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
  • Previous background in law enforcement or government/military with experience leading complex technical investigations
  • Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
  • Experience in a top-10 cyber consulting firm or leading DFIR provider preferred
  • One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)

Work location:


  • Canada, Remote

Our estimated base pay range for this role is $130,000-$150,000 CAD per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent. #LI-CK1

Life at At-Bay

Cyber insurance meets security. At-Bay is a cyber insurance carrier that provides tailored insurance products and security insights based on company IT systems and vulnerabilities. Weᅢᄁ¬ツᆲ¬トᄁre pioneering a new type of insurance driven by data and based on your specific IT systems. We continuously analyze, model and predict cyber risk to create the best coverage for our clients, and partner with brokers to deliver a comprehensive risk management program. In this dynamic risk environment, comprehensive insurance coverage is just the start. Our team of security experts is at your disposal monitoring your IT systems and providing you with security reports, informing you of new vulnerabilities, and helping you fix them. When you have an incident, our experts are there to help you get back on your feet as quickly as possible. Our IT security is free and included with your policy because our goal is the same as yours. Because we believe companies should be able to embrace technology, fearlessly. To learn more about At-Bay, visit www.at-bay.com and to get access to our platform for brokers, visit www.at-bay.com/bp/register Twitter: @FearlessAtBay
Thrive Here & What We Value1. Emphasis on innovation and transformation in specialty lines insurance industry2. End-toayer protection for digital age businesses3. Closing security technology and skills gap through cyber insurance policy4. Strong relationships with national brokerages to expand distribution of specialized products5. Collaborative environment focusing on process improvement6. Commitment to continuous learning and knowledge sharing culture7. Diverse team working together to redefine company culture8. Focus on driving profitable growth for the business9. Strong leadership and mentorship opportunities1e. Inclusive hiring practices and supportive team environments
Your tracker settings

We use cookies and similar methods to recognize visitors and remember their preferences. We also use them to measure ad campaign effectiveness, target ads and analyze site traffic. To learn more about these methods, including how to disable them, view our Cookie Policy or Privacy Policy.

By tapping `Accept`, you consent to the use of these methods by us and third parties. You can always change your tracker preferences by visiting our Cookie Policy.

logo innerThatStartupJob
Discover the best startup and their job positions, all in one place.
Copyright © 2024