1

Forensics Jobs in Quebec (NOW HIRING)

Cybersecurity Director

Quebec, QC · On-site +1

CA$138K - CA$173K/yr

Incident Response and Digital Forensics: Lead investigations into security incidents, perform forensic analyses, and oversee incident response activities. Coordinate with legal counsel, law ...

... Forensic, Malwares) Avis et recommandations Billet C2 - Documentation de resolution d'incidents Documentation a jour Enquete de securite Etat de situation Processus Politiques de pare-feu (Firewall ...

Forensic analysis * Security & Quality standards (PCI, ISO...) * Excellent oral and written communication skills * Customer-oriented * Compliance with commitments * Initiative-taking * Anticipation ...

Forensics information

See Quebec salary details

$22.5K

$101.5K

$165.5K

How much do forensics jobs pay per year?

As of Aug 6, 2026, the average yearly pay for forensics in Quebec is $101,518.00, according to ZipRecruiter salary data. Most workers in this role earn between $73,500.00 and $129,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by forensic professionals when collecting and analyzing evidence?

Forensic professionals often encounter challenges such as maintaining the integrity of evidence, adhering to strict chain-of-custody protocols, and working under tight deadlines. They must be meticulous in documentation and avoid contamination, as even small errors can compromise cases. Additionally, forensic teams frequently collaborate with law enforcement, attorneys, and sometimes testify in court, requiring strong communication and adaptability to different environments.

What are the key skills and qualifications needed to thrive as a forensic scientist?

To thrive as a Forensic Scientist, you need a solid background in chemistry, biology, and criminalistics, usually supported by a degree in forensic science or a related field. Familiarity with laboratory analysis tools, evidence management systems, and certifications like those from the American Board of Criminalistics are important for technical proficiency. Attention to detail, critical thinking, and strong written and verbal communication skills help you analyze evidence accurately and present findings clearly. These skills ensure the integrity of investigations and the reliability of evidence in legal proceedings.

What is the difference between Forensics vs Crime Scene Investigator?

AspectForensicsCrime Scene Investigator
Required CredentialsForensic science degree, certifications in forensic analysisCriminal justice or forensic science degree, training in crime scene processing
Work EnvironmentLaboratories, research facilities, courtroomsCrime scenes, field locations, police departments
Employer & IndustryLaw enforcement agencies, forensic labs, legal systemLaw enforcement agencies, police departments
Common Search & ComparisonForensics vs Crime Scene Investigator

Forensics involves analyzing physical evidence in labs and providing expert testimony, while Crime Scene Investigators focus on collecting evidence at crime scenes. Both roles are essential in criminal investigations but differ in their primary responsibilities and work environments.

What is forensics?

Forensics refers to the application of scientific methods and techniques to investigate crimes and analyze evidence that can be used in a court of law. Forensic professionals work in various fields, such as biology, chemistry, digital technology, and crime scene investigation, to help solve criminal cases. They collect, preserve, and examine physical evidence like fingerprints, DNA, and digital data to uncover facts and support legal proceedings. Forensics plays a crucial role in the justice system by providing objective and reliable information to aid investigations and court cases.
What are the most commonly searched types of Forensics jobs in Quebec? The most popular types of Forensics jobs in Quebec are:
Infographic showing various Forensics job openings in Quebec as of August 2026, with employment types broken down into 100% Full Time. Highlights an 57% In-person, 14% Hybrid, and 29% Remote job distribution, with an average salary of $101,518 per year, or $48.8 per hour.

Senior Specialist, Incident Response | Specialiste principal, Reponse aux incidents

SITA Switzerland Sarl

Montreal, QC

Full-time

Posted 3 days ago

New


Job description

Overview

WELCOME TO SITA  

At SITA, we keep airports moving, airlines flying smoothly, and borders open. Our technology and communication innovations power the success of the global air travel industry.

You’ll find us in 95% of international airports, working closely with over 2,500 transportation and government clients. Each partnership brings unique challenges, and we thrive on delivering fresh solutions and cutting-edge tech to keep operations running like clockwork. We don’t just move the world forward, we’re proud to be recognized as a Great Place to Work® by our employees and certified in most of our growing locations.

Here, we feel empowered, supported, and inspired to grow.

Are you ready to love your job? The adventure begins right here, with you, at SITA.

ABOUT THE ROLE & TEAM

 

As a Digital Forensics & Incident Response (DFIR) Specialist, you will play a key role in investigating cybersecurity incidents, performing digital forensic analysis, and supporting the containment and remediation of security threats across SITA's global environment. You will work closely with Security Operations, CSIRT Threat, Cloud & Infrastructure, Product Security, and Corporate IT teams to respond to threats, preserve evidence, and determine the root cause and impact of security incidents.

As part of SITA's Enterprise Information Security Office (EISO) and CSIRT Response Team, you will help strengthen the organization's incident response capabilities, forensic readiness, and cyber resilience while supporting the protection of SITA, its customers, and the broader air transport ecosystem.

This role is ideal for a proactive hands-on security professional with strong investigation and analytical skills who is passionate about incident response, digital forensics, and continuous improvement.

 

WHAT YOU WILL DO

  • Incident Response & Coordination
    • Investigate and manage cybersecurity incidents throughout the full incident response lifecycle, from analysis and containment to recovery and post-incident review.
    • Collaborate with SOC, CSIRT, IT, Cloud, Infrastructure, and Engineering teams to coordinate effective incident response activities and drive remediation efforts.
    • Produce incident reports and technical findings while continuously enhancing response processes, playbooks, and operational procedures.
  • Digital Forensics & Evidence Handling
    • Conduct digital forensic investigations across endpoints, servers, cloud, network, and SaaS environments, including evidence collection, preservation, analysis, and reporting.
    • Analyze forensic artifacts to identify attacker activity, determine root causes, assess business impact, and support investigations into malware, ransomware, account compromise, and data breaches.
    • Maintain robust evidence handling and documentation practices in alignment with legal, regulatory, and industry standards
  • Insider Threat & Risk
  • Support investigations involving insider threats, policy violations, privileged access misuse, and potential data loss incidents, while providing technical evidence and findings to Legal, Compliance, HR, and other stakeholders.
  • Identify and recommend security control improvements to mitigate insider threat risks and strengthen the organization's overall security posture.
  • operational processes across enterprise environments.
  • Tooling, Automation & Telemetry
    • Develop and maintain automation, scripts, and tools to enhance evidence collection, analysis, and incident response workflows.
    • Leverage AI-driven capabilities, security analytics, and telemetry to improve investigative efficiency and response effectiveness.
    • Enhance DFIR capabilities by improving logging, forensic readiness, tooling, and operational processes across enterprise environments.

Qualifications

ABOUT YOUR SKILLS

  • Proven experience in digital forensics, incident response, and cyber investigations within large enterprise environments.
  • Hands-on expertise with EDR/XDR platforms, SIEM solutions, forensic tools, and security monitoring technologies.
  • Strong ability to investigate and analyze security incidents across endpoints, servers, cloud environments, networks, and identity platforms.
  • Proficiency in Python and/or PowerShell, with working knowledge of KQL and other security-focused query languages.
  • Solid understanding of cyber threat actor tactics, techniques, and procedures (TTPs), including the MITRE ATT&CK framework.
  • Excellent analytical, problem-solving, and communication skills, with the ability to clearly document and present technical findings to diverse stakeholders.

Nice-to-Have:

  • Professional certifications such as GCFA, GNFA, GCIH, GREM, GCFE, CISSP, OSCP, or equivalent DFIR and cybersecurity credentials.
  • Hands-on experience in cloud security investigations and DFIR activities across Azure, AWS, and/or Google Cloud Platform (GCP) environments.
  • Strong proficiency with digital forensic methodologies and tools, including FTK, EnCase, Velociraptor, KAPE, Autopsy, Volatility, or similar platforms.
  • Experience in aviation, transportation, critical infrastructure, or operational technology (OT) environments, with knowledge of security automation, orchestration, and AI-assisted investigation techniques to enhance incident response effectiveness.

WHAT WE OFFER

We’re all about diversity. We operate in 200 countries and speak 60 different languages and cultures. We’re really proud of our inclusive environment. Our offices are comfortable and fun places to work, and we make sure you get to work from home too. Find out what it's like to join our team and take a step closer to your best life ever.

 Flex Week: Work from home up to 2 days/week (depending on your team’s needs)
 Flex Day: Make your workday suit your life and plans
 Flex Location: Take up to 30 days a year to work from any location in the world
 Employee Wellbeing: Access our 24/7 EAP and Champion Health platform for all-around wellbeing
 Professional Development: Build your skills with LinkedIn Learning and internal training programs
 Competitive Benefits: Designed to suit your country and contract type

Equal Employment Opportunity Employer / Veterans / Disabled.  SITA is an equal employment opportunity employer.  All qualified applicants will receive consideration for employment without regard of race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability.


Salary / Compensation Note
Hidden (-999)Qualifications:

ABOUT YOUR SKILLS

  • Proven experience in digital forensics, incident response, and cyber investigations within large enterprise environments.
  • Hands-on expertise with EDR/XDR platforms, SIEM solutions, forensic tools, and security monitoring technologies.
  • Strong ability to investigate and analyze security incidents across endpoints, servers, cloud environments, networks, and identity platforms.
  • Proficiency in Python and/or PowerShell, with working knowledge of KQL and other security-focused query languages.
  • Solid understanding of cyber threat actor tactics, techniques, and procedures (TTPs), including the MITRE ATT&CK framework.
  • Excellent analytical, problem-solving, and communication skills, with the ability to clearly document and present technical findings to diverse stakeholders.

Nice-to-Have:

  • Professional certifications such as GCFA, GNFA, GCIH, GREM, GCFE, CISSP, OSCP, or equivalent DFIR and cybersecurity credentials.
  • Hands-on experience in cloud security investigations and DFIR activities across Azure, AWS, and/or Google Cloud Platform (GCP) environments.
  • Strong proficiency with digital forensic methodologies and tools, including FTK, EnCase, Velociraptor, KAPE, Autopsy, Volatility, or similar platforms.
  • Experience in aviation, transportation, critical infrastructure, or operational technology (OT) environments, with knowledge of security automation, orchestration, and AI-assisted investigation techniques to enhance incident response effectiveness.

WHAT WE OFFER

We’re all about diversity. We operate in 200 countries and speak 60 different languages and cultures. We’re really proud of our inclusive environment. Our offices are comfortable and fun places to work, and we make sure you get to work from home too. Find out what it's like to join our team and take a step closer to your best life ever.

 Flex Week: Work from home up to 2 days/week (depending on your team’s needs)
 Flex Day: Make your workday suit your life and plans
 Flex Location: Take up to 30 days a year to work from any location in the world
 Employee Wellbeing: Access our 24/7 EAP and Champion Health platform for all-around wellbeing
 Professional Development: Build your skills with LinkedIn Learning and internal training programs
 Competitive Benefits: Designed to suit your country and contract type

Equal Employment Opportunity Employer / Veterans / Disabled.  SITA is an equal employment opportunity employer.  All qualified applicants will receive consideration for employment without regard of race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability.

Education:UNAVAILABLEEmployment Type: FULL_TIME