Consultant, Restoration and Remediation (Remote)

View full description

Requirements:

• Bachelor’s degree in information technology, Computer science, or related degree, or equivalent professional experience.
• Basic proficiency in analyzing and understanding cyber incidents.
• Foundational knowledge of various operating systems (Windows, Linux, MacOS) and their security features.
• Familiarity with cloud services and network administration.
• Experience with configuring firewalls, VPNs, Active Directory, Exchange, Group Policy.
• Familiarity with IT service management tools and ticketing systems.
• Excellent problem-solving skills and attention to detail.
• Excellent written and verbal communication skills.
• Good interpersonal and teamwork skills with a client-centric mindset.
• Strong organizational skills and the ability to manage multiple tasks concurrently.

Responsibilities:

• Provide post-incident recovery and collaborate with the DFIR team to assess the scope and impact of cyber incidents.
• Participate in efforts to restore compromised systems to a pre-incident state, employing best practices for data recovery, system configuration, and security hardening.
• Work with other senior members of the R&R team to develop and execute remediation plans tailored to each client’s unique situation.
• Apply and deepen technical knowledge to investigate complex security issues.
• Work with the DFIR team to collect digital artifacts and assist in forensics.
• Utilize systems administration skills to restore and configure systems.
• Troubleshoot network issues and assist with network configurations.
• Configure firewalls, VPNs, Active Directory, Exchange, Group Policy.
• Document all restoration and remediation efforts.