Senior Compromise Recovery / Cyber Recovery Specialist

Employment; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Employment is seeking a Senior Compromise Recovery / Cyber Recovery Specialist in Doha to lead hands-on recovery of enterprise infrastructure after ransomware and major cyber incidents.

The role requires deep system, network, storage and backup administration, AD/Azure rebuilds, Defender ecosystem experience, and a proven ability to restore secure environments with zero-trust post‑incident hardening.

Qualifications

• 10+ years of overall IT / Infrastructure / Cybersecurity experience
• Strong Microsoft infrastructure background
• Hands-on involvement in ransomware, compromise recovery or large-scale cyber incident recovery
• Experience rebuilding and securing AD/Azure environments following security incidents

Responsibilities

• Lead recovery of enterprise infrastructure after ransomware or cyber incidents
• Secure restoration of compromised environments with zero-trust post-incident hardening
• Collaborate with security and IT teams to restore AD/Azure and Defender configurations

Skills

System administration

Network administration

Storage administration

Backup administration

Cyber incident recovery

Ransomware recovery

AD recovery

Azure rebuilds

Identity security

Defender ecosystem

Zero Trust

Post-incident hardening

Secure restoration

Education

SC-300 – Identity & Access Administrator

SC-100 – Cybersecurity Architect

AZ-104 – Azure Administrator

AZ-300 / AZ-301 – Azure Solutions Architect

Tools

SC-300 – Identity & Access Administrator

SC-100 – Cybersecurity Architect

AZ-104 – Azure Administrator

AZ-300 / AZ-301 – Azure Solutions Architect

Job description

Senior Compromise Recovery / Cyber Recovery Specialist

Industry Information Technology and Services

We are looking for an experienced Cyber Recovery Specialist with strong hands‑on expertise in recovering enterprise infrastructure following ransomware and major cybersecurity incidents.

Key Expertise Required

• System, network, storage & backup administration
• Cyber incident & ransomware recovery
• Active Directory (AD) recovery and rebuilding
• Microsoft Entra ID & identity security
• Microsoft Defender ecosystem
• Backup restoration & disaster recovery
• Zero Trust recovery and post‑incident hardening
• Secure restoration of compromised enterprise environments

Microsoft Certifications – Minimum 3 Required

• SC-300 – Identity & Access Administrator
• SC-100 – Cybersecurity Architect
• AZ-104 – Azure Administrator
• AZ-300 / AZ-301 – Azure Solutions Architect

Ideal Profile

• 10+ years of overall IT / Infrastructure / Cybersecurity experience
• Strong Microsoft infrastructure background
• Hands‑on involvement in ransomware, compromise recovery or large‑scale cyber incident recovery
• Experience rebuilding and securing AD/Azure environments following security incidents
• This is a specialist role for professionals who combine deep infrastructure expertise with cybersecurity incident recovery.

PASS if all mandatory items met, FAIL if no real compromise recovery track record

Restoration cases; ransomware recovery evidence; cert copies must