Consultant, Restoration and Remediation (Remote)

The role

You will contribute technical expertise during active incidents to help clients recover from ransomware, malware infections, and breaches. You will execute remediation tasks, restore systems, and collaborate with forensic analysts.

What you will do

• Support post-incident recovery efforts and collaborate with DFIR teams
• Participate in restoring compromised systems including data recovery, system configuration, and hardening
• Assist in developing and executing tailored remediation plans
• Reimage, rebuild, and reconfigure endpoints, servers, and services like Active Directory, Exchange, Group Policy, and VPN
• Use systems administration skills to restore and configure computing environments
• Troubleshoot network issues and assist in resolving infrastructure-level connectivity or access problems
• Contribute to the collection of digital artifacts and forensic evidence
• Apply knowledge to investigate and address malware infections, unauthorized access, and system integrity issues
• Implement endpoint protection and access control tools under supervision
• Document all actions taken in a clear, structured format

Required qualifications

• Foundational knowledge of Windows, Linux, and MacOS environments and their security features
• Experience with firewalls, VPNs, Active Directory, Group Policy, Exchange, and common endpoint security tools
• Understanding of cyber incident impact, attacker techniques, and indicators of compromise (IOCs)
• Strong technical troubleshooting skills
• Excellent written and verbal communication skills
• Ability to manage competing tasks, adapt quickly to changing scenarios, and contribute in high-pressure situations

Nice to have

• Expertise in all listed areas is not required

Benefits

• Competitive compensation plan and equity
• Remote workforce
• Generous paid time off plan and floating holidays
• Employer paid premiums for medical, dental, and vision for team members and dependents
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits
• Paid parental leave
• Professional development and career advancement opportunities
• Performance management platform for coaching, feedback, and recognition

Before you apply

• Submit application on our website
• Preliminary phone interview with the People Team
• Virtual/Teams Interview with Restoration Team Members
• Virtual/Teams interview with hiring leader/Director of R&R
• Take Home Mock Scenario

About the company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents. Their approach is designed by industry veterans to address challenges of efficiency, predictability, and transparency.