Incident Recovery Consultant

Avertium, LLC; Idaho; Remote; USD 130,000 - 190,000; Full time

Job summary

Avertium, LLC is seeking an Incident Recovery Consultant to help clients recover from cyberattacks and return to normal operations. The role emphasizes rapid containment, restoration, and risk-driven guidance for diverse technical audiences.

The position supports remote delivery across the US, with the opportunity to build the practice and lead recovery teams, leveraging a wide range of technologies and best practices in incident response and cloud environments.

Qualifications

• Bachelor's degree in computer science, information technology, business management or related field is preferred.
• Relevant Graduate degree is highly regarded.
• Industry certifications or training in security, cloud services , networking and/or incident response
• Minimum ten years' experience in information technology role, with significant experience in system administration and cloud platforms.

Responsibilities

• Identify and prioritize actions needed to contain threats and return to business as normal as quickly as possible.
• Manage the restoration process.
• Provide onsite or remote support in rebuilding and restoring servers, workstations , and applications.
• Collect and preserve potential evidence.
• Identify and document security and related deficiencies that need to be remediated.
• Provide leadership in building out the recovery team.

Skills

Incident response

Cloud environments

Active Directory

Networking fundamentals

Leadership

Communication skills

Backup and recovery

Education

Bachelor's degree in CS/IT or related field

Graduate degree preferred

Industry certifications in security/cloud

Tools

Active Directory management

Cloud platforms (AWS/Azure)

Backup and recovery software

Job description

Incident Recovery Consultant

IR Full Time Remote, Remote, US

Incident Recovery Consultant

Avertium is seeking a candidate that will be responsible for helping clients recover from cyberattacks and return to normal business operations as soon as possible. This requires expertise in a wide range of technologies, the ability to operate under pressure , take control of the situation and build confidence that there is a path forward for clients facing one of worst days of their career.

This role is an extension of an existing business line, as a result there is a significant opportunity to build the practice with significant support from the company. You will be expected to master a wide range of technologies and build out processes and toolsets to rapidly rebuild and restore systems that have been damaged following a security incident. You will also need to be able to evaluate the security risks posed by bringing systems back online , implement controls to minimize those risks and communicate the justification for your recommendations to clients with varying levels of technical expertise .

Responsibilities

• Identify and prioritize actions needed to contain threats and return to business as normal as quickly as possible.
• Manage the restoration process.
• Provide onsite or remote support in rebuilding and restoring servers, workstations , and applications.
• C ollect and preserve potential evidence.
• Identify and document security and related deficiencies that need to be remediated.
• Provide leadership in building out the recovery team.

Requirements

• Excellent written and verbal communication skills .
• Demonstrated ability to communicate complex technical skills to a non-technical audience.
• Experience designing, configuring, and managing Microsoft Active Directory .
• Experience in designing, configuring, and managing cloud environments .
• Strong interpersonal and leadership skills .
• A solid grasp of networking and core Internet protocols ( e .g., TCP/IP, DNS, SMTP, HTTP, SMB , and distributed networks) .
• Solid understanding of current attack vectors and containment measures .
• Experience with on-prem and cloud backup and recovery software and systems.

Preferred Qualifications:

• Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&CK Framework .
• Familiarity with incident response investigations .
• Experience with digital forensic tools .
• Experience handling security incidents in the cloud.

Required Qualification s :

• B achelor's degree in computer science, information technology, business management or related field is preferred.
• Relevant Graduate degree is highly regarded.
• Industry certifications or training in security, cloud services , networking and\or incident response
• Minimum ten years' experience in information technology role, with significant experience in system administration and cloud platforms.