Senior Consultant, Restoration and Remediation

Responsibilities

• Perform restoration and recovery efforts following cyber incidents
• Collaborate with DFIR teams to assess scope and impact of incidents
• Restore compromised systems using Active Directory, Group Policy, and Azure AD
• Script and automate recovery processes using PowerShell and Windows command line
• Restore virtualized environments using VMware, Hyper-V, or Nutanix
• Manage server hardware platforms including HP, Dell, and Cisco UCS
• Recover data using storage vendors like Dell EMC, NetApp, and Pure Storage
• Implement backup solutions such as Veeam, Zerto, or Unitrends
• Oversee enterprise messaging systems including Exchange and M365
• Manage networking components including firewalls, VPNs, and switches
• Implement MFA services such as Okta, DUO, or Microsoft Authentication
• Document all restoration efforts, lessons learned, and best practices
• Provide on-call and weekend rotational support for critical incidents

Requirements

• Bachelor’s degree in IT, Computer Science, or equivalent professional experience
• Previous DFIR and restoration experience in a consulting environment
• Proficiency in Microsoft Windows Server, Exchange, and M365
• Expertise in Windows, Linux, or MacOS operating systems
• Experience in network administration and firewall configuration
• Strong problem-solving skills and attention to detail
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with cloud services
• Familiarity with hypervisor technologies like VMware or Citrix
• Knowledge of storage solutions like NetApp or Pure Storage

Benefits

• Competitive compensation and total rewards package
• Fully remote workforce
• Generous paid time off and floating holidays
• Paid parental leave
• Employer-paid medical, dental, and vision premiums for employees and dependents
• 401K matching program
• Professional development and career advancement opportunities

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, and data theft.