Security Specialist - Incident Commander (DFIR)

As a Security Specialist - Incident Commander (DFIR) at Ubisoft Montréal, you will lead the response to complex cybersecurity incidents affecting our global infrastructure, game production environments, and player-facing services. You’ll join the Security and Risk Management team and help strengthen our detection, investigation, and response capabilities across the organization.  What you’ll do  Lead the response to high-severity cybersecurity incidents across multiple teams including security operations, information technology, legal, and production teams  Coordinate incident management activities and serve as a central point of contact during active investigations  Analyze security risks affecting game production environments, live services, development pipelines, and player data  Improve incident response processes, investigation procedures, and internal security tools  Conduct proactive threat hunting activities across enterprise environments  Perform digital forensic investigations involving memory, disk, and network analysis using tools such as Velociraptor, Autopsy, and similar platforms  Collaborate with technical and non-technical stakeholders to communicate investigation findings and response plans  Mentor team members and support knowledge sharing activities across the security operations center  Lead simulation exercises and contribute to continuous improvement initiatives  Prepare post-incident reports for technical teams, leadership, legal, and privacy stakeholders  What you bring to the team  Experience responding to and coordinating complex cybersecurity incidents from detection through resolution  Demonstrated ability to work independently, identify gaps, recommend improvements, and implement solutions  Strong knowledge of security information and event management platforms and endpoint detection and response tools such as Splunk, CrowdStrike, Defender, or equivalent technologies  Experience working with security automation and orchestration platforms  Hands-on experience conducting digital forensic investigations using tools such as Velociraptor, Autopsy, Axiom, or similar solutions  Knowledge of threat hunting methodologies and investigation techniques in complex environments  Strong communication skills with the ability to adapt technical information for different audiences  Experience working with gaming environments, anti-cheat systems, or large-scale cloud services is an asset  Your CV highlighting relevant skills and experiences  Relevant project links, publications, or technical presentations related to cybersecurity or incident response