Senior Consultant, Restoration and Remediation

Responsibilities

• Perform restoration and recovery efforts following cyber incidents
• Collaborate with DFIR teams to assess scope and impact of incidents
• Restore compromised systems using Active Directory, Group Policy, and Azure AD
• Script and automate recovery processes using PowerShell and Windows command line
• Restore virtualized environments using VMware, Hyper-V, Citrix, or Nutanix
• Manage server hardware platforms including HP, Dell, Nutanix, and Cisco UCS
• Recover data using storage vendors like Dell EMC, NetApp, and Pure Storage
• Implement backup solutions such as Veeam, Backup Exec, and Zerto
• Oversee enterprise messaging systems including Exchange and M365
• Manage networking components including firewalls, VPNs, and core switches
• Implement MFA services such as Okta, DUO, and Microsoft Authentication
• Document restoration efforts, lessons learned, and best practices
• Provide on-call and weekend rotational support

Requirements

• Bachelor’s degree in IT, Computer Science, or equivalent professional experience
• Previous DFIR and restoration experience in a consulting firm
• Proficiency in Microsoft Exchange, M365, and Windows Server
• Expertise in Windows, Linux, or MacOS operating systems
• Experience in network administration and firewall configuration
• Strong problem-solving skills and attention to detail
• Excellent verbal and written communication skills

Preferred Qualifications

• Familiarity with cloud services
• Experience with hypervisor technologies
• Knowledge of storage and backup solutions

Benefits

• Competitive compensation and total rewards package
• Fully remote workforce
• Generous paid time off and floating holidays
• Paid parental leave
• Employer-paid medical, dental, and vision premiums for employees and dependents
• 401K matching program
• Professional development and career advancement opportunities

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, and data theft.