Who We Are:

Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.

Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With:

The vacant Security Incident Management, Forensic Lead role will report to the Leader, Security Incident Management. The Security Incident Management, Forensic Lead will be responsible to provide expert-level subject matter expert in digital forensics across host, cloud, network, and mobile environments. You will play a critical role within the Cybersecurity Incident Management & Response (IMR) team, leading complex investigations, performing advanced security content analysis, and supporting the organization’s overall cybersecurity posture.

This role requires a highly skilled technical professional capable of managing evidence, applying best-practice forensic methodologies, and providing actionable insights to contain, remediate, and prevent security incidents.

What You Will Do:

Content Analysis/Digital Forensics

• Leading and conducting in-depth security content analysis and investigations across multiple environments, including Windows, macOS, Linux, cloud platforms (O365, Azure, AWS), network devices, and mobile endpoints. Content analysis

  • File analysis - static and dynamic analysis of files including disassembly, decompilation, taint analysis, and sandbox analysis

  • Network traffic and packet (PCAP) analysis - the analysis of network traffic and payloads for C2, data exfiltration, reconnaissance/discovery and lateral movement

  • User behaviour analysis (UBA) - analysis of user behaviour to determine baselines and identify anomalies

  • Data analysis - using large data techniques (e.g. data mining) to detect malicious behaviour

• Supporting threat hunting activities and correlating content analysis/forensic findings with broader security events.

• Coordinating with forensics vendor(s) during incidents to conduct digital forensics.

• Documenting and communicating investigative findings in clear, actionable reports for both technical teams and executive stakeholders.

• Providing analysis and support for eDiscovery and legal investigations, ensuring regulatory and compliance requirements are met.

• Sundry Security Incident Management related duties as assigned.

Incident Response Preparedness

• Developing and maintaining the content analysis readiness program, including procedures, tooling, and best practices.

• Developing proper evidence handling and chain of custody procedures for Tier 1 Analysts during investigations.

• Managing and maintaining content analysis tools and solutions (e.g., file/malware analysis tools, network forensics and packet capture analysis tools, etc), including tool selection, deployment, tuning, and lifecycle management.

• Mentoring and providing forensic guidance to Security Incident Analysts within the team.

• Staying current with emerging forensic techniques, tools, and threat actor methodologies, applying this knowledge to improve organizational response capabilities.

Use Case Management

• Fine-tune detection rules and enhance security monitoring.

• Developing complex detection use cases based on content analysis findings.

Threat Intelligence Support

• Provide content analysis support to the Cyber Threat Intelligence team to support IOC and TTP development, and enrich reporting

What You Bring:

• Eligibility to work for Interac Corp. in Canada in a full-time capacity.

• Minimum 5–7 years of experience in digital forensics (e.g. O/S analysis, file analysis, network traffic analysis, packet capture analysis, UBA), incident response, or cybersecurity investigations.

• Hands-on experience with host, cloud, network, and mobile content analysis forensics.

• Deep understanding of cybersecurity incident lifecycle, threat actor tactics, and forensic methodologies.

• Experience with forensic and investigative tools: IDA-Pro, Wireshark, Netwitness, malware analysis sandboxes, X-Ways, EnCase, Magnet AXIOM, Velociraptor, or equivalent.

• Strong knowledge of evidence handling, chain of custody, and forensic best practices.

• Proven ability to analyze complex technical data and translate findings for executive and legal stakeholders.

• Experience in the financial services sector or other highly regulated environments is strongly preferred.

• Relevant certifications, including:

  • GIAC: GCIH, GCFA, GCFE, GNFA, GREM

  • CFCE, CCE, CHFI

What We’re Offering:

The hiring range for this position is $125,000 - $155,000, and you will also be eligible for our short-term incentive plan. The exact amount will depend on factors such as skills, experience, and job-related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future, and includes:

• Generous vacation and wellness days to help you recharge

• Comprehensive employer-paid benefits coverage for peace of mind

• Market-leading employer-funded RRSP program to invest in your future

• Flexible hybrid work model for better work-life balance

• Access to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family

• Pregnancy and parental leave top-up to support growing families

• Charitable donation matching with United Way to amplify your impact

Why Join Us?

At Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose-driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect:

• Investing in the Future – Help us unlock digital prosperity for all Canadians.

• Innovative Thinking – Collaborate on products, practices, and platforms that redefine what’s possible.

• Inclusive Culture – Be empowered to bring your whole self to work and realize your full potential.

• Inspiring Community – Work in an ecosystem where we lift each other up and rise together.

• Intentional Support – Enjoy flexible, supportive offerings that prioritize your total wellness.

Additional Pre-Employment Requirements:

To ensure the integrity of our organization, successful candidates will be required to complete background checks, which may include, Canadian Criminal Credit Check, Canadian ID Cross-Check, Public Safety Verification, 5-year Employment Verification, Education Verification, Credit Check, and Social Media Check.

Equal Opportunity Employer

Interac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds, experiences, and perspectives come together. That’s why we are committed to providing fair and equitable employment opportunities for all individuals, without discrimination based on race, color, ancestry, ethnic origin, place of origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, or any other characteristic protected by applicable law.

If you require accommodation during any stage of the application or recruitment process, please contact us at humanresources@interac.ca. We will work with you to meet your needs.

Please be aware that certain individuals are misusing Interac Corp.’s name and logo to promote fictitious employment opportunities. Interac Corp. never requests, solicits, or accepts any form of payment in exchange for employment. Any such offers are fraudulent and should be disregarded. Interac Corp. assumes no liability for any claims, losses, damages, expenses, or inconveniences arising from or related to these fraudulent activities. Such communications do not constitute an offer or representation by Interac Corp. or its subsidiaries and affiliates.