Remote Senior Cyber Restoration & Remediation Consultant

Surefire Cyber Inc.; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Generous paid time off

Employer-paid premiums for medical, d 

401K matching

Parental leave

Professional development

Job summary

Surefire Cyber Inc. is seeking a Senior Consultant in Restoration to lead recovery efforts after cyber incidents. This fully remote role collaborates with DFIR teams, legal counsel, and clients to restore systems and strengthen defenses.

You will apply expertise in remediation, backup strategies, and secure configurations to minimize downtime and data loss. You will work with across disciplines to document actions, share knowledge, and contribute to post‑incident recovery while providing

Qualifications

• Extensive restoration and remediation experience post‑cyber incidents.
• Ability to collaborate with DFIR, legal, and clients to restore operations efficiently.
• Proven skills in IT infrastructure deployment and security across Windows/Linux environments.

Responsibilities

• Lead post‑incident restoration and recovery efforts with the DFIR team.
• Document actions taken, lessons learned, and best practices.
• Collaborate with internal teams and clients to refine remediation approaches.
• Provide after‑hours on‑call support as required.

Skills

DFIR knowledge

Client-facing consulting

PowerShell scripting

Active Directory

VMware/Hyper‑V virtualization

Windows Server administration

Education

Bachelor's degree in IT/CS

Tools

Veeam

M365

Exchange Server

Job description

Surefire Cyber Inc. is seeking a Senior Consultant in Restoration to lead recovery efforts after cyber incidents. This fully remote role collaborates with DFIR teams, legal counsel, and clients to restore systems and strengthen defenses.

You will apply expertise in remediation, backup strategies, and secure configurations to minimize downtime and data loss. You will work with across disciplines to document actions, share knowledge, and contribute to post‑incident recovery while providing