Senior Incident Recovery Consultant - Remote

Surefire Cyber Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote workforce

Generous paid time off

Job summary

Surefire Cyber is seeking a Senior Consultant in Restoration to join a remote team delivering advanced recovery after cyber incidents. You will help restore compromised systems and implement remediation in collaboration with DFIR, legal counsel, insurers, and clients, driving rapid operational recovery with a focus on security posture.

Ideal candidates bring deep hands‑on experience across Windows/Linux/Mac environments, AD, Exchange, M365, and virtualization, with strong communication and

Qualifications

• Bachelor’s degree in information technology, computer science, related degree, or equivalent former professional experience.
• DFIR and restoration experience in a consulting firm.
• Professionally skilled in the deployment and management of IT infrastructure, including Microsoft Exchange, M365, Microsoft Windows Server operating systems, and workstations.
• Expertise in various operating systems (Windows, Linux, MacOS) and their security features.
• Experience configuring firewalls, VPN’s, Active Directory, Exchange, Group Policy.
• Excellent communication skills, both written and verbal, can explain technical concepts to non‑technical audiences.
• Strong interpersonal skills, a team player mentality, and a client‑centric mindset.

Responsibilities

• Actively share knowledge with team members cultivating a culture of continuous learning, and staying up to date on industry trends, emerging threats, and best practices.
• Build strong professional relationships and serve as a trusted advisor during client-facing incident response engagements, contributing your advanced knowledge and expertise to post-incident recovery efforts.
• Work closely with the DFIR team to assess and determine the scope and impact of cyber incidents.
• Utilize experience with Active Directory, Group Policy Objects, ADSI, Windows Security, replication, Azure Active Directory Connect, and other relevant technologies to restore compromised systems.
• Script and automate recovery processes using PowerShell and Windows command line tools.
• Leverage experience in hypervisor technologies such as VMware, Hyper‑V, Citrix XenServer, and Nutanix Acropolis to restore virtualized environments.
• Work with various server hardware platforms including HP, Dell, Nutanix, and Cisco UCS.
• Utilize experience with storage vendors such as Dell EMC, NetApp, HP/Nimble, and Pure Storage to recover data and systems.
• Implement backup solutions such as Veeam, Backup Exec, Unitrends, and Zerto to ensure data recovery.
• Manage desktop operating systems and deployments, including Windows 7/8/10/11.
• Oversee enterprise messaging systems, including Exchange and M365.
• Handle server‑based computing environments, including Citrix and Terminal Services.
• Leverage networking knowledge, including core switches, wireless access points, firewalls, and VPN configurations.
• Implement two‑factor and multi‑factor authentication services such as Okta, DUO, Microsoft Authentication, Ping, RSA, and others.
• Collaborate with internal teams, external partners, and clients to refine and documentall restoration and recovery efforts, maintaining a clear and organized record of actions taken, lessons learned, and best practices.
• Provide after‑hours (on‑call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.

Skills

Active Directory

Group Policy Objects

ADSI

Windows Security

Azure Active Directory Connect

PowerShell

Windows command line

VMware

Hyper‑V

Citrix XenServer

Nutanix Acropolis

HP

Dell

Nutanix

Cisco UCS

Dell EMC

NetApp

HP/Nimble

Pure Storage

Veeam

Backup Exec

Unitrends

Zerto

Exchange

M365

Citrix

Terminal Services

core switches

wireless access points

firewalls

VPN configurations

Okta

DUO

Microsoft Authentication

Ping

RSA

Education

Bachelor’s degree in information technology

Job description

Surefire Cyber is seeking a Senior Consultant in Restoration to join a remote team delivering advanced recovery after cyber incidents. You will help restore compromised systems and implement remediation in collaboration with DFIR, legal counsel, insurers, and clients, driving rapid operational recovery with a focus on security posture.

Ideal candidates bring deep hands‑on experience across Windows/Linux/Mac environments, AD, Exchange, M365, and virtualization, with strong communication and