Senior Consultant, Restoration and Remediation (Remote)

<div class="content-intro"><h2>About Surefire Cyber</h2>

<p>Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents – and fortify their cyber resilience after an event.</p>

<p>Surefire Cyber’s approach and delivery are designed by industry veterans who have worked shoulder-to ­shoulder with law firms, insurance carriers, brokers, law enforcement, and impacted organizations in responding to cyber incidents. We are marshaling this experience to address the industry’s persistent challenges of efficiency, predictability, and transparency.</p></div><h2><span data-contrast="none"><span data-ccp-parastyle="heading 1"><span data-ccp-parastyle="heading 1">Job Title: </span>Senior </span><span data-ccp-parastyle="heading 1">Consultant, Restoration </span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":480,"335559739":240}"> </span></h2>

<p><strong><span data-contrast="none">Location: Remote (USA)</span><span data-ccp-props="{"335559739":40}"> </span></strong></p>

<p><strong><span data-contrast="none">Role: Full time</span><span data-ccp-props="{"335559739":40}"> / Exempt</span></strong></p>

<h4>What Makes You Stand Out</h4>

<p><span data-contrast="none"><span data-ccp-parastyle="Body Text">As a Senior Consultant in </span><span data-ccp-parastyle="Body Text">Restoration,</span><span data-ccp-parastyle="Body Text"> you are a highly technical and motivated professional with extensive experience in </span><span data-ccp-parastyle="Body Text">assisting</span><span data-ccp-parastyle="Body Text"> clients in recovering from cyber incidents, restoring compromised systems, and implementing effective remediation strategies. You thrive in fast-paced environments, collaborating closely with Digital Forensic and Incident Response (DFIR) teams, legal counsel, insurance carriers, and affected clients to ensure swift restoration services in parallel with forensics and incident response efforts. Your technical </span><span data-ccp-parastyle="Body Text">abilities</span><span data-ccp-parastyle="Body Text"> and </span><span data-ccp-parastyle="Body Text">expertise</span><span data-ccp-parastyle="Body Text"> make you a trusted advisor to clients </span><span data-ccp-parastyle="Body Text">seeking</span><span data-ccp-parastyle="Body Text"> to enhance their overall cybersecurity posture.</span></span><span data-ccp-props="{"201341983":1,"335559739":240,"335559740":320}"> </span></p>

<h4><span data-contrast="none"><span data-ccp-parastyle="heading 2">How You'll Make an Impact</span></span> <span data-ccp-props="{"134245418":true,"134245529":true,"335559738":280,"335559739":40}"> </span></h4>

<p><span data-contrast="none"><span data-ccp-parastyle="Body Text">This is a full-time remote opportunity, and you will </span><span data-ccp-parastyle="Body Text">perform a variety</span> <span data-ccp-parastyle="Body Text">of restoration and recovery efforts</span><span data-ccp-parastyle="Body Text"> while working closely with the Director of Restoration, </span><span data-ccp-parastyle="Body Text">Restoration</span><span data-ccp-parastyle="Body Text"> team members, </span><span data-ccp-parastyle="Body Text">and </span><span data-ccp-parastyle="Body Text">the Digital Forensic and Incident Response team</span><span data-ccp-parastyle="Body Text">.</span></span><span data-ccp-props="{"201341983":1,"335559739":240,"335559740":320}"> <span data-contrast="none"><span data-ccp-parastyle="Body Text">They will play a critical role in post-incident recovery, working alongside the DFIR team to restore systems and secure infrastructures after cyber incidents. Through meticulous remediation efforts and application of technical expertise, they’ll help clients regain operational stability and strengthen their defenses against future threats. </span></span></span></p>

<h4>Your Role in Action <span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":0}"> </span></h4>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none"><span data-ccp-charstyle="normaltextrun" data-ccp-charstyle-defn="{"ObjectId":"d9afe030-66ef-4e85-85cd-95bc2298907c|143","ClassId":1073872969,"Properties":[469775450,"normaltextrun",201340122,"1",134233614,"true",469778129,"normaltextrun",335572020,"1",469778324,"Default Paragraph Font"]}">Actively</span> <span data-ccp-charstyle="normaltextrun">share knowledge</span><span data-ccp-charstyle="normaltextrun"> with team members cultivating a culture of continuous learning, and </span><span data-ccp-charstyle="normaltextrun">staying</span><span data-ccp-charstyle="normaltextrun"> up to date on industry trends, emerging threats, and best practices.</span><span data-ccp-charstyle="eop" data-ccp-charstyle-defn="{"ObjectId":"d9afe030-66ef-4e85-85cd-95bc2298907c|144","ClassId":1073872969,"Properties":[469775450,"eop",201340122,"1",134233614,"true",469778129,"eop",335572020,"1",469778324,"Default Paragraph Font"]}"> </span></span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="paragraph" data-ccp-parastyle-defn="{"ObjectId":"d9afe030-66ef-4e85-85cd-95bc2298907c|142","ClassId":1073872969,"Properties":[469775450,"paragraph",201340122,"2",134233614,"true",469778129,"paragraph",335572020,"1",469777841,"Times New Roman",469777842,"Times New Roman",469777843,"Times New Roman",469777844,"Times New Roman",469769226,"Times New Roman",335551500,"4278190080",134233118,"true",134233117,"true",469778324,"Normal"]}">Build strong professional relationships and serve as a trusted advisor during client-facing incident response engagements, contributing </span><span data-ccp-parastyle="paragraph">your advanced knowledge and </span><span data-ccp-parastyle="paragraph">expertise</span><span data-ccp-parastyle="paragraph"> to post-incident recovery efforts.</span></span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="paragraph">Work</span><span data-ccp-parastyle="paragraph"> closely with the DFIR team to assess </span><span data-ccp-parastyle="paragraph">and </span><span data-ccp-parastyle="paragraph">determine</span> <span data-ccp-parastyle="paragraph">the scope and impact of cyber incidents.</span></span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Utilize experience with Active Directory, Group Policy Objects, ADSI, Windows Security, replication, Azure Active Directory Connect, and other relevant technologies to restore compromised systems.</span><span data-ccp-props="{"335559739":40}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">Script and automate recovery processes using PowerShell and Windows command line tools.</span><span data-ccp-props="{"335559739":40}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none">Leverage experience in hypervisor technologies such as VMware, Hyper-V, Citrix XenServer, and Nutanix Acropolis to restore virtualized environments.</span><span data-ccp-props="{"335559739":40}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none">Work with various server hardware platforms including HP, Dell, Nutanix, and Cisco UCS.</span><span data-ccp-props="{"335559739":40}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":765,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none">Utilize experience with storage vendors such as Dell EMC, NetApp, HP/Nimble, and Pure Storage to recover data and systems.</span><span data-ccp-props="{"335559739":40}"> </span></li>