Associate- Restoration

S-RM; Greater London; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

A leading cybersecurity firm in London seeks an Associate for their Restoration & Recovery team. The role involves overseeing restoration workstreams during incidents, delivering technical support, and developing partnerships with restoration partners. Candidates should have 3+ years in IT Engineering, with expertise in virtualisation and networking. This role offers flexible working hours, 25 days holiday, and various health benefits.

Benefits

25 days holiday plus bank holidays

Hybrid working hours

Matching pension contribution up to 7%

Life insurance 4× annual salary

Health and medical benefits

Qualifications

• Candidates should have relevant experience in IT Engineering or related fields.
• Demonstrated track record in Incident Response scenarios is necessary.
• Familiarity with restoration projects is critical.

Responsibilities

• Oversee restoration workstreams during Incident Response cases.
• Deliver hands-on technical support for clients.
• Develop restoration plans and contribute to training.
• Participate in on-call rotation to provide constant client coverage.

Skills

In‑depth knowledge of virtualisation

In‑depth knowledge of Active Directory

Experience with networking

Comprehensive understanding of backup solutions

Education

3+ years in IT Engineering, System Administration, Infrastructure, or Networking

Tools

Microsoft 365

Cisco networking and firewalls

Linux distributions

Hybrid infrastructures

Job description

ASSOCIATE RESTORATION & RECOVERY TEAM

We are looking for talented consultants to join the Restoration & Recovery team within our growing Incident Response practice at an Associate level. These individuals will play a critical role in the continued success of our Cyber Security division.

You will work across the full lifecycle of security incidents to help our clients respond and recover, including:

Responsibilities

• Overseeing restoration workstreams during Incident Response cases – you will support the Incident Response team in developing bespoke restoration strategies during live incidents, focusing on ensuring security and capability are maintained.
• Delivering hands‑on technical support to assist clients with restoration and recovery during cyber incidents.
• Leading and developing relationships with supporting restoration partners – managing and directing partners to achieve a positive resolution when additional resources are needed.
• Developing plans, policies and training – contributing to strengthening the Incident Response process through restoration training for the wider Incident Response team.
• Developing and sharing domain expertise – growing your cyber expertise and sharing it with the wider team via internal initiatives and programs.
• Participating in an on‑call rotation to provide 24x7x365 client incident coverage.
• On‑site Restoration Support – attending client sites during early restoration stages and, when required, providing overnight or international travel support.

Other features of the role include:

• Variety of casework – no day the same, responding to a wide range of incidents for both public and corporate clients.
• Developing an understanding of Incident Response – opportunities to broaden security awareness into the broader Incident Response process and learn how restoration fits into the bigger picture.
• Flexible working practices – supporting work‑life balance with flexible options to help wellbeing during intense, high‑pressure incidents.

What we’re looking for

We are looking for Associates with 3 years or more relevant experience in IT Engineering, System Administration, Infrastructure or Networking. Candidates should have a demonstrated track record of deploying their skills in IR scenarios and managing time‑sensitive restoration projects for impacted clients.

Key qualifications and experience that are likely to lead to success in this role include (but are not limited to):

Core Experience & Skills

• In‑depth knowledge of virtualisation (VMware ESXi / Hyper‑V) and cloud‑hosted (AWS / Azure / GCP) configuration and implementation.
• In‑depth knowledge of Active Directory and Windows Domain functions, including Azure AD integration.
• Experience with networking, including VLAN configuration on switches and firewall troubleshooting.
• Comprehensive understanding of backup solutions, data restoration, and preparing systems for production.

Hands‑on Technical Experience

• Microsoft 365, including Exchange Online and Intune.
• Entra ID.
• Cisco networking and firewalls (Catalyst, Nexus, ASA, FTD).
• Linux distributions such as Ubuntu, CentOS, Debian.
• Virtual Desktop Infrastructure such as Citrix XenDesktop, VMware Horizon, or Azure Virtual Desktop.
• Hybrid infrastructures combining on‑premise, colo datacentres, cloud, and SaaS.

Certifications (beneficial)

• Microsoft role‑based certifications (Administrator, Network Engineer, Security Engineer or Support Engineer levels).
• VMware VCP (Data Centre Virtualisation).
• Networking certifications such as CompTIA Network+, Cisco CCNA, or Aruba Certified Professional.

Our Benefits

• 25 days holiday per year plus bank holidays (plus 1 day for every 26 days of service, up to 30 days).
• Hybrid and flexible working hours.
• Matching pension contribution up to 7% (up to a maximum of 14% combined) and financial education.
• Life insurance 4× annual salary.
• Parental support: fertility treatment leave, 26 weeks maternity leave (full pay) + 13 weeks half pay, 6 weeks paternity leave.
• Health and medical benefits – private dental and medical insurance, virtual GP, gym discounts, EAP programme, free Headspace access.

The role will be based in our London office, but flexible working arrangements are available.