Senior Cyber Recovery & Ransomware Resilience Lead

Employment; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Employment is seeking a Senior Compromise Recovery / Cyber Recovery Specialist in Doha to lead hands-on recovery of enterprise infrastructure after ransomware and major cyber incidents.

The role requires deep system, network, storage and backup administration, AD/Azure rebuilds, Defender ecosystem experience, and a proven ability to restore secure environments with zero-trust post‑incident hardening.

Qualifications

• 10+ years of overall IT / Infrastructure / Cybersecurity experience
• Strong Microsoft infrastructure background
• Hands-on involvement in ransomware, compromise recovery or large-scale cyber incident recovery
• Experience rebuilding and securing AD/Azure environments following security incidents

Responsibilities

• Lead recovery of enterprise infrastructure after ransomware or cyber incidents
• Secure restoration of compromised environments with zero-trust post-incident hardening
• Collaborate with security and IT teams to restore AD/Azure and Defender configurations

Skills

System administration

Network administration

Storage administration

Backup administration

Cyber incident recovery

Ransomware recovery

AD recovery

Azure rebuilds

Identity security

Defender ecosystem

Zero Trust

Post-incident hardening

Secure restoration

Education

SC-300 – Identity & Access Administrator

SC-100 – Cybersecurity Architect

AZ-104 – Azure Administrator

AZ-300 / AZ-301 – Azure Solutions Architect

Tools

SC-300 – Identity & Access Administrator

SC-100 – Cybersecurity Architect

AZ-104 – Azure Administrator

AZ-300 / AZ-301 – Azure Solutions Architect

Job description

Employment is seeking a Senior Compromise Recovery / Cyber Recovery Specialist in Doha to lead hands-on recovery of enterprise infrastructure after ransomware and major cyber incidents.

The role requires deep system, network, storage and backup administration, AD/Azure rebuilds, Defender ecosystem experience, and a proven ability to restore secure environments with zero-trust post‑incident hardening.