Tekstraton is seeking a highly skilled Incident Response & Threat Hunter to join our elite cybersecurity team in Vancouver, BC on a hybrid basis. In this pivotal role, you will be on the front lines defending critical infrastructure, orchestrating incident containment, and proactively uncovering sophisticated threat actor activity across hybrid cloud and on-premise environments.
Key Responsibilities:
- Lead end-to-end incident response investigations, forensic collections, and remediation workflows for critical security incidents.
- Formulate and execute hypothesis-driven threat hunting operations utilizing the MITRE ATT&CK framework.
- Conduct deep-dive host, memory, filesystem, and network packet analysis to determine adversary root causes and dwell time.
- Partner with Security Operations and Engineering teams to refine detection engineering logic, EDR telemetry, and automated playbooks.
- Author detailed post-incident reviews, executive briefings, and tactical recommendations to strengthen organizational cyber resilience.
Candidate Requirements:
- 5+ years of dedicated professional experience in digital forensics, incident response, or proactive threat hunting.
- Demonstrated proficiency deploying enterprise EDR platforms (e.g., CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint) and modern SIEM architectures.
- Hands-on experience with memory and disk forensics tools such as Volatility, FTK Imager, KAPE, or X-Ways.
- Solid scripting capability in Python, PowerShell, or Bash to automate forensic data extraction and telemetry parsing.
- Industry-standard certifications such as GIAC (GCIH, GCFA, GNFA) or equivalent are strongly desired.
- Must be based in or willing to relocate to Greater Vancouver to support our hybrid office cadence.