Security Specialist Incident Commander (DFIR)

As a Security Specialist - Incident Commander (DFIR) at Ubisoft Montréal you will lead the response to complex cybersecurity incidents affecting our global infrastructure game production environments and player-facing services. Youll join the Security and Risk Management team and help strengthen our detection investigation and response capabilities across the organization. 

What youll do 

• Lead the response to high-severity cybersecurity incidents across multiple teams including security operations information technology legal and production teams 
• Coordinate incident management activities and serve as a central point of contact during active investigations 
• Analyze security risks affecting game production environments live services development pipelines and player data 
• Improve incident response processes investigation procedures and internal security tools 
• Conduct proactive threat hunting activities across enterprise environments 
• Perform digital forensic investigations involving memory disk and network analysis using tools such as Velociraptor Autopsy and similar platforms 
• Collaborate with technical and non-technical stakeholders to communicate investigation findings and response plans 
• Mentor team members and support knowledge sharing activities across the security operations center 
• Lead simulation exercises and contribute to continuous improvement initiatives 
• Prepare post-incident reports for technical teams leadership legal and privacy stakeholders 

Qualifications :

What you bring to the team 

• Experience responding to and coordinating complex cybersecurity incidents from detection through resolution 
• Demonstrated ability to work independently identify gaps recommend improvements and implement solutions 
• Strong knowledge of security information and event management platforms and endpoint detection and response tools such as Splunk CrowdStrike Defender or equivalent technologies 
• Experience working with security automation and orchestration platforms 
• Hands-on experience conducting digital forensic investigations using tools such as Velociraptor Autopsy Axiom or similar solutions 
• Knowledge of threat hunting methodologies and investigation techniques in complex environments 
• Strong communication skills with the ability to adapt technical information for different audiences 
• Experience working with gaming environments anti-cheat systems or large-scale cloud services is an asset 

Additional Information :

• Your CV highlighting relevant skills and experiences 

• Relevant project links publications or technical presentations related to cybersecurity or incident response 

Remote Work :

No

Employment Type :

Full-time