Principal Consultant, Restoration and Remediation

<div class="content-intro"><h2>About Surefire Cyber</h2>

<p>Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents – and fortify their cyber resilience after an event.</p>

<p>Surefire Cyber’s approach and delivery are designed by industry veterans who have worked shoulder-to ­shoulder with law firms, insurance carriers, brokers, law enforcement, and impacted organizations in responding to cyber incidents. We are marshaling this experience to address the industry’s persistent challenges of efficiency, predictability, and transparency.</p></div><p><span data-contrast="none"><span data-ccp-parastyle="heading 1">Job Title: </span><span data-ccp-parastyle="heading 1">Principal, Restoration and Remediation</span><span data-ccp-parastyle="heading 1"> </span></span></p>

<p><span data-contrast="none">Location: Remote (USA)</span><span data-ccp-props="{"> </span></p>

<p><span data-contrast="none">Role: Full time</span><span data-ccp-props="{"> </span></p>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name" data-ccp-parastyle-defn="{"ObjectId":"39c20f6e-10c6-56d9-9478-4c52bd784c85|1","ClassId":1073872969,"Properties":[469777841,"Arial",469777844,"Arial",469769226,"Arial",335551500,"10498816",268442635,"20",335559740,"280",201341983,"1",335559739,"0",201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777842,"Arial",469777843,"Arial",201341986,"1",469775450,"Client Legal Name",201340122,"2",134234082,"true",134233614,"true",469778129,"ClientLegalName",335572020,"1",134224900,"true",469777462,"7200",469777927,"0",469777928,"1",469778324,"Normal"]}">What Makes You Stand Out</span></span></strong><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">You are a senior technical leader in cybersecurity and incident response, known for restoring order and confidence during high-severity events. </span><span data-ccp-parastyle="Client Legal Name">You’ve</span><span data-ccp-parastyle="Client Legal Name"> led the full lifecycle of post-incident recovery efforts</span><span data-ccp-parastyle="Client Legal Name">,</span><span data-ccp-parastyle="Client Legal Name"> from strategic planning and stakeholder advising</span><span data-ccp-parastyle="Client Legal Name">,</span><span data-ccp-parastyle="Client Legal Name"> to hands-on systems restoration and network reconfiguration.</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">You bring not only deep technical skills across enterprise IT infrastructure but also the confidence and clarity to lead clients, coach teammates, and evolve internal capabilities. You thrive in high-pressure environments, take initiative, and are passionate about growing the next generation of cyber responders.</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">How </span><span data-ccp-parastyle="Client Legal Name">You’ll</span> <span data-ccp-parastyle="Client Legal Name">M</span><span data-ccp-parastyle="Client Legal Name">ake </span><span data-ccp-parastyle="Client Legal Name">A</span><span data-ccp-parastyle="Client Legal Name">n</span><span data-ccp-parastyle="Client Legal Name"> Impact</span></span></strong><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">As a Principal Consultant on the Restoration and Remediation team, </span><span data-ccp-parastyle="Client Legal Name">you’ll</span><span data-ccp-parastyle="Client Legal Name"> lead Surefire </span><span data-ccp-parastyle="Client Legal Name">Cyber’s</span><span data-ccp-parastyle="Client Legal Name"> most complex and sensitive post-incident recovery engagements. </span><span data-ccp-parastyle="Client Legal Name">You’ll</span><span data-ccp-parastyle="Client Legal Name"> advise clients on restoration </span><span data-ccp-parastyle="Client Legal Name">strategy, coordinate with cross-functional teams, and oversee technical execution across diverse environments.</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">You’ll</span><span data-ccp-parastyle="Client Legal Name"> also play a key role in maturing Surefire</span> <span data-ccp-parastyle="Client Legal Name">Cyber’</span><span data-ccp-parastyle="Client Legal Name">s</span><span data-ccp-parastyle="Client Legal Name"> internal R&R capabilities</span><span data-ccp-parastyle="Client Legal Name">;</span><span data-ccp-parastyle="Client Legal Name"> mentoring consultants, improving </span><span data-ccp-parastyle="Client Legal Name">playbooks</span><span data-ccp-parastyle="Client Legal Name"> and tooling, and shaping how we scale recovery operations.</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="Client Legal Name">Your Role </span><span data-ccp-parastyle="Client Legal Name">I</span><span data-ccp-parastyle="Client Legal Name">n</span><span data-ccp-parastyle="Client Legal Name"> Action</span></span></strong><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280,"469777462":[7200],"469777927":[0],"469777928":[1]}"> </span></p>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">Lead end-to-end recovery operations for complex cyber incidents, including ransomware outbreaks, large-scale breaches, and targeted compromises</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">Architect and manage technical remediation plans across hybrid infrastructure (on-prem, cloud, and SaaS)</span><span data-ccp-parastyle="List Bullet 2">,</span><span data-ccp-parastyle="List Bullet 2"> including user recovery, server rebuilds, reconfiguration, and hardening</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">Oversee restoration of identity services (Active Directory, Azure AD), messaging systems (Exchange, M365), VPNs, firewalls, MFA, and enterprise backup solutions</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">A</span><span data-ccp-parastyle="List Bullet 2">d</span><span data-ccp-parastyle="List Bullet 2">vise client executives (CIOs, CISOs, legal, insurers) on remediation strategy, recovery timelines, and long-term resilience improvements</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">Coordinate recovery workstreams across DFIR, IT, legal, and insurance stakeholders, ensuring alignment and technical integrity</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="List Bullet 2">Act as technical escalation </span><span data-ccp-parastyle="List Bullet 2">point</span><span data-ccp-parastyle="List Bullet 2"> during recovery engagements, solving roadblocks with precision and speed</span></span><span data-ccp-props="{"201341983":1,"335559739":0,"335559740":280}"> </span></li>

</ul>

<ul>