Director, Post-Breach Recovery & Incident Response

Ransomware Recovery; Miami (FL); On-site; USD 180,000 - 240,000; Full time

Job summary

CYPFER is seeking a Director, Post Breach Recovery/IR to lead complex remediation and ransomware recovery engagements. You will guide containment and recovery while acting as a deep technical resource for challenging problems.

Our consultants frequently rebuild compromised enterprise environments and this director will shape engagements and the technical direction of the team. The ideal candidate combines hands-on infrastructure and security experience with leadership ability to mentor

Qualifications

• 8+ years in cybersecurity, incident response, or enterprise infrastructure.
• Strong technical background in enterprise systems and identity architecture.
• Experience with Active Directory recovery and identity security.

Responsibilities

• Lead technical recovery efforts during major cyber incidents
• Direct teams rebuilding compromised infrastructure and identity platforms
• Serve as a senior technical resource for complex recovery challenges
• Guide containment, eradication, and recovery operations
• Help design and execute secure rebuild strategies for enterprise environments
• Communicate clearly with executives, legal teams, and technical stakeholders
• Mentor and support consultants across multiple engagements
• Contribute to the development of recovery playbooks and frameworks

Skills

Cybersecurity

Incident response

Leadership

Identity security

Active Directory recovery

EDR experience

Tools

EDR

Active Directory

Entra ID

Job description

CYPFER is seeking a Director, Post Breach Recovery/IR to lead complex remediation and ransomware recovery engagements. You will guide containment and recovery while acting as a deep technical resource for challenging problems.

Our consultants frequently rebuild compromised enterprise environments and this director will shape engagements and the technical direction of the team. The ideal candidate combines hands-on infrastructure and security experience with leadership ability to mentor