Principal Consultant, Restoration and Remediation

Emploi pas sur LinkedIn

🕒 il y a 1 mois

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Surefire Cyber Inc.

Site WebLinkedInTous les Emplois

11 - 50 employés

🔒 Cybersecurity

🔐 Sécurité

Cybersecurity • Security

Surefire Cyber Inc. est une entreprise leader dans le domaine de la cybersécurité, spécialisée dans les services de réponse aux incidents rapides et efficaces. Elle se concentre sur la gestion et l'atténuation des incidents cybernétiques tels que les attaques par ransomware, les compromissions de courrier électronique, les infections par malware, le vol de données et d'autres menaces cybernétiques. Avec une approche centrée sur le client, Surefire Cyber offre aux clients l'assurance et les conseils nécessaires pour se préparer, répondre et se remettre des incidents cybernétiques, tout en renforçant leur résilience cybernétique. Leur approche axée sur la technologie s'appuie sur des connaissances expertes et des capacités d'analyse médico-légale pour fournir des solutions efficaces. L'équipe d'experts de Surefire Cyber offre de l'empathie et une réflexion critique pour soutenir les clients à travers des défis cybernétiques complexes, garantissant une prise de décision rapide et éclairée pour améliorer les résultats en matière de sécurité.

Description

• Lead end-to-end recovery operations for complex cyber incidents, including ransomware outbreaks, large-scale breaches, and targeted compromises • Architect and manage technical remediation plans across hybrid infrastructure (on-prem, cloud, and SaaS), including user recovery, server rebuilds, reconfiguration, and hardening • Oversee restoration of identity services (Active Directory, Azure AD), messaging systems (Exchange, M365), VPNs, firewalls, MFA, and enterprise backup solutions • Advise client executives (CIOs, CISOs, legal, insurers) on remediation strategy, recovery timelines, and long-term resilience improvements • Coordinate recovery workstreams across DFIR, IT, legal, and insurance stakeholders, ensuring alignment and technical integrity • Act as technical escalation point during recovery engagements, solving roadblocks with precision and speed • Mentor senior and junior consultants on real-time client work and long-term development, including technical coaching, feedback, and project guidance • Document and review client-facing technical reports, timelines, and lessons learned to ensure completeness and clarity • Contribute to the evolution of Surefire Cyber’s recovery methodologies, including internal tooling, knowledge bases, and training paths • Lead or support proactive services including tabletop exercises, remediation readiness assessments, and executive advisory engagements • Participate in after-hours response rotations during major incident events (on-call availability expected)

🎯 Exigences

• 10+ years of professional experience in cybersecurity, incident response, systems/network administration, or IT infrastructure engineering • Proven leadership in guiding enterprise-scale recovery efforts during cyber incidents, ideally in a client-facing or consulting capacity • Deep hands-on experience with Active Directory, Azure AD, M365, Exchange, Group Policy, virtualization platforms (VMware, Hyper-V, Citrix), and backup tools (e.g., Veeam, Zerto, Unitrends) • Expert understanding of infrastructure reconfiguration, network segmentation, identity access recovery, and endpoint security post-compromise • Ability to architect and execute remediation plans in coordination with DFIR, SOC, and cloud teams • Comfortable advising senior business and legal stakeholders during high-pressure engagements • Strong written and verbal communication skills, including experience preparing and presenting executive-level remediation updates • Demonstrated experience mentoring and growing technical talent within a team • Familiarity with attacker TTPs, threat actor behaviors, and their implications for recovery sequencing and infrastructure redesign • Demonstrated expertise in cybersecurity, systems engineering, or incident response, whether gained through professional experience, certifications, or equivalent technical training. • Advanced certifications (e.g., CISSP, GCFA, MCSE, OSCP) are strongly preferred.

🏖️ Avantages

• Competitive compensation plan and total rewards package for team members • Remote workforce • Generous paid time off plan and floating holidays • Paid parental leave • Employer paid premiums for both team members and their dependents for medical, dental, and vision • Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits. • Professional development and career advancement opportunities • We prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth.