Consultant, Restoration and Remediation

Responsibilities

• Support post-incident recovery efforts and collaborate with DFIR teams
• Restore compromised systems including data recovery, system configuration, and hardening
• Develop and execute tailored remediation plans
• Reimage, rebuild, and reconfigure endpoints, servers, and services like Active Directory, Exchange, and VPN
• Troubleshoot network issues and infrastructure-level connectivity
• Contribute to the collection of digital artifacts and forensic evidence
• Investigate malware infections, unauthorized access, and system integrity issues
• Implement endpoint protection and access control tools
• Document all technical findings, decisions, and lessons learned
• Participate in after-hours on-call and weekend rotational support

Requirements

• Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent technical experience
• Foundational knowledge of Windows, Linux, and MacOS security features
• Experience with firewalls, VPNs, Active Directory, Group Policy, and Exchange
• Understanding of cyber incident impact, attacker techniques, and IOCs
• Strong technical troubleshooting skills
• Excellent written and verbal communication skills
• Ability to manage competing tasks in high-pressure situations

Benefits

• Competitive compensation plan and total rewards package
• Remote workforce
• Generous paid time off and floating holidays
• Paid parental leave
• Employer-paid medical, dental, and vision premiums for team members and dependents
• 401K matching program
• Disability, FSA, HSA, and Life/AD&D benefits
• Professional development and career advancement opportunities

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats.