Principal Recovery & Remediation Lead (Remote)

Surefire Cyber Inc.; Northern (KY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Paid time off

Health benefits (medical, dental, and

Job summary

Surefire Cyber is seeking a Principal Consultant for Restoration and Remediation to lead complex post-incident recovery engagements across diverse environments.

You’ll advise clients on restoration strategy, coordinate cross-functional teams, and mentor junior consultants while maturing internal tooling and playbooks to scale recovery operations. Remote USA-based role with on-call rotations.

Qualifications

• 10+ years in cybersecurity or incident response.
• Proven leadership in enterprise-scale recovery.
• Hands-on with AD, Azure AD, M365 and Exchange.
• Experience coordinating across DFIR, IT, legal and insurers.
• Security certifications preferred (CISSP, GCFA, OSCP).

Responsibilities

• Lead end-to-end recovery operations for complex incidents.
• Architect remediation plans across hybrid infrastructure (on-prem, cloud, SaaS).
• Oversee restoration of identity services, VPNs, firewalls, MFA, backups.
• Advise executives on remediation strategy and timelines.
• Coordinate recovery workstreams across DFIR, IT, legal, and insurers.
• Mentor senior and junior consultants and improve playbooks/tools.
• Document client-facing reports, timelines, and lessons learned.

Skills

Cybersecurity

Incident response

AD / Directory

Azure / M365

Virtualization

Leadership

Client-facing

DFIR coordination

Threat intel

Education

Advanced certifications (CISSP, GCFA, OSCP, etc.)

Tools

Veeam

Zerto

Unitrends

Exchange

M365

AD tooling

Job description

Surefire Cyber is seeking a Principal Consultant for Restoration and Remediation to lead complex post-incident recovery engagements across diverse environments.

You’ll advise clients on restoration strategy, coordinate cross-functional teams, and mentor junior consultants while maturing internal tooling and playbooks to scale recovery operations. Remote USA-based role with on-call rotations.