Consultant, Restoration and Remediation

Surefire Cyber; United States; A distancia; USD 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote workforce

Competitive compensation package

Paid time off and floating holidays

Parental leave

Medical, dental, and vision premiums

Descripción de la vacante

Surefire Cyber is seeking a security incident responder to support post-incident recovery and remediation efforts. You will work with DFIR teams to assess incidents, restore systems, and harden environments across Windows, Linux, and macOS.

The role requires a solid foundation in IT/ cybersecurity, experience with AD/Exchange, and strong troubleshooting and communication skills. Flexible to remote/on-call support and a fast-paced environment.

Formación

• Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent technical experience.
• Foundational knowledge of Windows, Linux, and macOS environments.
• Experience with firewalls, VPNs, Active Directory, Group Policy, Exchange, and endpoint security tools.
• Understanding of cyber incident impact, attacker techniques, and indicators of compromise (IOCs).
• Strong technical troubleshooting skills and excellent written and verbal communication.
• Ability to manage competing tasks in high-pressure situations.

Responsabilidades

• Support post-incident recovery efforts, collaborating with DFIR teams to assess the scope and impact of cyber incidents.
• Participate in restoring compromised systems to a pre-incident state, including data recovery, system configuration, and hardening.
• Assist in developing and executing tailored remediation plans based on technical, operational, and regulatory requirements.
• Reimage, rebuild, and reconfigure endpoints, servers, and affected services such as Active Directory, Exchange, Group Policy, and VPN.
• Use systems administration skills to restore and configure computing environments.
• Troubleshoot network issues and assist in resolving infrastructure-level connectivity or access problems.
• Contribute to the collection of digital artifacts and forensic evidence.
• Implement endpoint protection and access control tools.
• Document all actions taken in a clear, structured format.
• Participate in after-hours on-call and weekend rotational support.

Conocimientos

Troubleshooting

Communication

Multitasking

Educación

Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent

Herramientas

Windows OS

Linux OS

macOS

Active Directory

Exchange

Descripción del empleo

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents.

Responsibilities

• Support post-incident recovery efforts, collaborating with DFIR teams to assess the scope and impact of cyber incidents
• Participate in restoring compromised systems to a pre-incident state, including data recovery, system configuration, and hardening
• Assist in developing and executing tailored remediation plans based on technical, operational, and regulatory requirements
• Reimage, rebuild, and reconfigure endpoints, servers, and affected services such as Active Directory, Exchange, Group Policy, and VPN
• Use systems administration skills to restore and configure computing environments
• Troubleshoot network issues and assist in resolving infrastructure-level connectivity or access problems
• Contribute to the collection of digital artifacts and forensic evidence
• Implement endpoint protection and access control tools
• Document all actions taken in a clear, structured format
• Participate in after-hours on-call and weekend rotational support

Requirements

• Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent technical experience
• Foundational knowledge of Windows, Linux, and MacOS environments
• Experience with firewalls, VPNs, Active Directory, Group Policy, Exchange, and endpoint security tools
• Understanding of cyber incident impact, attacker techniques, and indicators of compromise (IOCs)
• Strong technical troubleshooting skills
• Excellent written and verbal communication skills
• Ability to manage competing tasks in high-pressure situations

Benefits

• Competitive compensation plan and total rewards package
• Remote workforce
• Generous paid time off plan and floating holidays
• Paid parental leave
• Employer paid premiums for medical, dental, and vision for team members and dependents
• 401K matching program
• Professional development and career advancement opportunities