Cyber Incident Responder with Visa Sponsorship

About the Company

IBM is a global technology and consulting company at the forefront of innovation. For over a century, IBM has been dedicated to every client’s success and to creating innovations that matter for the world. With operations in over 170 countries, IBM Canada is a leading technology provider, helping businesses and governments transform through hybrid cloud, AI, and enterprise services. Our cybersecurity division protects clients from evolving threats, leveraging cutting-edge technology and deep expertise to secure digital infrastructures worldwide.

Job Description

IBM is seeking a highly skilled and proactive Cyber Incident Responder to join our dynamic security team in Saskatoon, Saskatchewan. This role offers an exceptional opportunity for talented cybersecurity professionals worldwide, as we are providing visa sponsorship for eligible candidates. As an Incident Responder, you will be on the front lines, detecting, analyzing, and mitigating cybersecurity threats and incidents across our clients’ diverse environments. You will play a critical role in protecting valuable assets, minimizing damage, and restoring normal operations swiftly and effectively. This hybrid position requires a blend of on-site presence for collaborative work and remote flexibility.

Key Responsibilities

• Lead incident response activities from detection to containment, eradication, recovery, and post-incident analysis.
• Conduct forensic analysis of compromised systems and network devices to identify root causes and attacker methodologies.
• Develop and implement containment strategies to limit the impact of security incidents.
• Collaborate with cross-functional teams, including IT operations, legal, and communication teams, during incident resolution.
• Document all phases of incident response, including investigation details, actions taken, and lessons learned.
• Contribute to the continuous improvement of incident response processes, tools, and playbooks.
• Participate in on-call rotation as required for critical incident support.
• Mentor junior security analysts and contribute to knowledge sharing within the team.

Required Skills

• Proven experience in cybersecurity incident response, digital forensics, or threat hunting.
• Strong understanding of common attack vectors, malware types, and threat actor tactics, techniques, and procedures (TTPs).
• Proficiency with security tools such as SIEM, EDR, network intrusion detection/prevention systems (NIDS/NIPS), and vulnerability scanners.
• Experience with forensic analysis tools (e.g., FTK Imager, Autopsy, Volatility).
• Knowledge of operating systems (Windows, Linux, macOS) and network protocols.
• Excellent analytical and problem-solving skills with meticulous attention to detail.
• Strong communication skills, both written and verbal, for technical and non-technical audiences.
• Ability to work under pressure in a fast-paced environment.

Preferred Qualifications

• Relevant industry certifications (e.g., GCIH, GCFA, CEH, CISSP).
• Experience with cloud security platforms (AWS, Azure, GCP).
• Scripting skills (Python, PowerShell, Bash) for automation and analysis.
• Knowledge of regulatory compliance frameworks (e.g., GDPR, PIPEDA, ISO 27001).
• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Perks & Benefits

• Comprehensive health, dental, and vision insurance.
• Generous paid time off and holidays.
• Retirement savings plans with company match.
• Professional development opportunities and tuition reimbursement.
• Employee assistance program.
• Flexible work arrangements (hybrid model).
• Visa sponsorship and relocation assistance.
• Access to cutting-edge technology and innovation projects.
• Diverse and inclusive work environment.

Apply Now