Incident Responder (Visa Sponsorship Available)

About the Company

CGI is among the largest IT and business consulting services firms in the world, committed to helping clients achieve their business goals. Founded in Quebec City, Canada, CGI has grown into a global leader, providing an end-to-end portfolio of capabilities, from IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. We are dedicated to delivering results for our clients and providing a supportive, collaborative environment for our members.

Job Description

We are seeking a highly skilled and proactive Incident Responder to join our dynamic cybersecurity team in Sainte-Foy, Quebec. This role is crucial for protecting CGI and its clients from evolving cyber threats by leading incident response efforts from detection through resolution. The ideal candidate will have extensive experience in security operations, threat hunting, and forensic analysis, with a strong understanding of various attack vectors and mitigation strategies. This position offers visa sponsorship for qualified international candidates looking to establish a career in a leading global IT firm in Canada.

Key Responsibilities

• Lead and manage cybersecurity incidents from initial detection to full resolution, including containment, eradication, recovery, and post-incident analysis.
• Perform in-depth forensic analysis of compromised systems and networks to determine the root cause and scope of security incidents.
• Develop and implement incident response playbooks, processes, and procedures to enhance our organizational response capabilities.
• Utilize SIEM, EDR, network intrusion detection systems, and other security tools to identify, analyze, and respond to threats.
• Conduct proactive threat hunting activities to identify advanced persistent threats (APTs) and other sophisticated attacks.
• Collaborate with IT, legal, and business units to ensure a coordinated and effective response to incidents.
• Prepare detailed incident reports and present findings to technical and non-technical stakeholders.
• Participate in an on-call rotation to provide 24/7 incident response coverage.
• Mentor junior team members and contribute to the development of the security team's skills and knowledge.

Required Skills

• Minimum 4 years of experience in incident response, security operations, or a related cybersecurity role.
• Proven experience with security incident and event management (SIEM) platforms (e.g., Splunk, QRadar, Sentinel).
• Strong understanding of network protocols, operating systems (Windows, Linux, macOS), and cloud environments (AWS, Azure, GCP).
• Expertise in forensic analysis tools and techniques.
• Familiarity with common attack techniques and mitigation strategies (e.g., MITRE ATT&CK framework).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively under pressure and manage multiple incidents simultaneously.
• Fluency in English (both written and spoken).

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Relevant industry certifications (e.g., GCIH, GCFA, CEH, CySA+).
• Experience with scripting languages (e.g., Python, PowerShell) for automation and analysis.
• Knowledge of various regulatory compliance frameworks (e.g., GDPR, PCI DSS, ISO 27001).
• Bilingualism (English and French) is a significant asset for the Quebec location.

Perks & Benefits

• Comprehensive health, dental, and vision insurance.
• Retirement savings plan with company match.
• Paid time off and holidays.
• Professional development and training opportunities.
• Visa sponsorship and relocation assistance.
• Employee assistance program.
• Hybrid work model for flexibility.
• Modern office environment in a vibrant city.
• Access to a global network of cybersecurity experts.

Apply Now