Senior DFIR Restoration Engineer — Remote Ransomware Recovery

Tokio Marine HCC – A&H Group; Texas; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Medical, vision, dental

401(k) plan with company match

Paid time off

Parental leave

Wellness program

Job summary

Tokio Marine HCC – A&H Group seeks a Senior Restoration Engineer to lead DFIR recovery engagements, focusing on containment, recovery, and restoration during active incidents. You will direct complex rebuilds of Windows servers, Active Directory, virtualization platforms, and core services while preserving forensic integrity.

Reporting to the Director of Engineering, you will coordinate with engagement managers, forensic teams, and client IT leadership, guiding remediation decisions and

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field.

Responsibilities

• Lead the technical restoration workstream for ransomware, network intrusion, and other cyber incidents, from assessment through return to normal operations.

Skills

Windows Server administration

Disaster recovery

Incident response

Backup and restore

Active Directory

Security tooling

Education

Bachelor’s degree in IT, CS, Cybersecurity or related field

Tools

VMware

Hyper-V

Microsoft 365

Entra ID

Job description

Tokio Marine HCC – A&H Group seeks a Senior Restoration Engineer to lead DFIR recovery engagements, focusing on containment, recovery, and restoration during active incidents. You will direct complex rebuilds of Windows servers, Active Directory, virtualization platforms, and core services while preserving forensic integrity.

Reporting to the Director of Engineering, you will coordinate with engagement managers, forensic teams, and client IT leadership, guiding remediation decisions and