Senior Consultant – Cyber Resilience

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $160k - $200k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Thinkahead Consultant Psychologist Pty Ltd

WebsiteLinkedInAll Job Openings

1 - 10 employees

🏥 Healthcare

💼 Consulting

📚 Education

Healthcare • Consulting • Education

Thinkahead Consultant Psychologist Pty Ltd is a privately owned psychology firm that operates in both the clinical and corporate consulting spaces. In the clinical setting, they provide psychological assessment and interventions to individuals, children, couples, and families, collaborating with local GPs and health organizations. In the corporate arena, Thinkahead partners with organizations to facilitate transformation and enhance performance through corporate wellbeing initiatives, leadership development, coaching, and culture enhancement programs. Their approach combines psychological principles with innovative business strategies to create constructive work cultures and high-performing teams.

📋 Description

• Assess and mature incident response, cyber resilience, and threat intelligence capabilities • Design or improve recovery operating models based on threat hunting scenarios, roles and responsibilities, escalation paths, and decision rights • Develop and refine cyber recovery plans, recovery runbooks, crisis playbooks, and communications procedures • Facilitate post-incident reviews, after-action reviews, lessons-learned sessions, tabletop exercises, simulations, and technical recovery exercises • Evaluate recovery dependencies across identity, networking, endpoints, applications, data, cloud platforms, backup infrastructure, and third parties • Assess backup and restore strategies, including isolation, immutability, recoverability, privileged-access controls, and validation testing • Define critical attack paths, pertinent threat intelligence sources, and exposure reconnaissance • Create roadmaps to mature anticipation and recovery capabilities • Support implementation of prioritized improvements with client technical teams and delivery partners • Lead purple-team-style validation of cyber recovery readiness using realistic attack paths and scenarios • Partner with offensive-security and defensive-security stakeholders to validate controls, telemetry, escalation paths, and recovery procedures • Use threat intelligence, exposure findings, attack-path analysis, and detection gaps to prioritize resilience improvements • Identify control, telemetry, and detection improvements to reduce time to contain, investigate, and recover • Connect vulnerability, exposure, detection, and recovery data into risk-informed resilience programs • Contribute to assessments of compromise assumptions, blast radius, and recovery sequencing • Provide feedback to upstream security capabilities based on incident and exercise findings • Lead workshops with technical, operational, risk, and executive stakeholders • Produce assessment reports, target-state designs, roadmaps, playbooks, exercise materials, and executive briefings • Serve as a trusted advisor during high-consequence resilience and recovery initiatives • Contribute reusable methods, accelerators, reference architectures, and points of view to AHEAD’s cyber resilience practice • Mentor consultants and collaborate with account, delivery, and technical leadership • Support proposal development, scoping, estimation, and solution shaping

🎯 Requirements

• Significant experience in cybersecurity consulting, incident response, cyber recovery, disaster recovery, business continuity, or a closely related discipline • Demonstrated experience designing, assessing, testing, or improving incident response and recovery capabilities • Strong understanding of enterprise infrastructure and security environments, including identity, endpoints, networks, cloud, applications, data, backups, and third-party dependencies • Ability to distinguish and integrate cyber recovery, IT disaster recovery, business continuity, and crisis management practices • Experience facilitating tabletop exercises, simulations, post-incident reviews, or recovery testing • Ability to communicate complex technical risks and recovery decisions to both practitioners and executives • Strong consulting skills, including workshop facilitation, structured problem solving, written communication, and stakeholder management • Willingness to travel for client engagements as required • Preferred: Experience with ransomware recovery, destructive attacks, identity compromise, cloud recovery, or major cyber incident response • Preferred: Experience developing recovery architectures, clean-room or isolated recovery environments, cyber vaults, immutable backups, or recovery validation programs • Preferred: Experience with security operations, detection engineering, threat hunting, threat intelligence, attack-path analysis, or exposure management • Preferred: Familiarity with NIST CSF, NIST SP 800-61, NIST SP 800-34, CISA guidance, ISO 22301, ISO 27001, or comparable frameworks • Preferred: Relevant certifications such as CISSP, CISM, CBCP, CRISC, GCIH, GCIA, GCFA, or equivalent experience • Preferred: Experience operating in regulated, complex, or highly available environments • Preferred: Experience building offerings, methodologies, or delivery practices in a consulting organization

🏖️ Benefits

• Medical, Dental, and Vision Insurance • 401(k) • Paid company holidays • Paid time off • Paid parental and caregiver leave • Encouragement of cross-department training and development • Sponsoring certifications and credentials for continued learning • Multi-million-dollar technology lab • AI application and resume review opt-out without penalty • Interview recording and transcription opt-out without penalty