Senior Consultant, Restoration and Remediation (Remote)

Bachelor’s degree in information technology, computer science, related degree, or equivalent former professional experience as an IT Engineer, Systems Administrator, Cybersecurity Consultant, or related position. Previous DFIR and restoration experience in a consulting firm. Professionally skilled in the deployment and management of IT infrastructure, including Microsoft Exchange, M365, Microsoft Windows Server operating systems, and workstations. Expertise in various operating systems (Windows, Linux, MacOS) and their security features. Familiarity with cloud services. Experience in network administration. Experience configuring firewalls, VPN’s, Active Directory, Exchange, Group Policy. Skilled at problem-solving and exhibits a high-level of attention to detail. Can effectively under pressure while maintaining professional composure. Excellent communication skills, both written and verbal, can explain technical concepts to non-technical audiences. Strong interpersonal skills, a team player mentality, and a client-centric mindset. Exceptional organizational skills and the ability to manage multiple competing priorities. Excited by the opportunity to learn new things and comfortable working with other team members to expand knowledge base and experience.

Perform a variety of restoration and recovery efforts. Work closely with the Director of Restoration, Restoration team members, and the Digital Forensic and Incident Response team. Play a critical role in post-incident recovery, working alongside the DFIR team to restore systems and secure infrastructures after cyber incidents. Meticulously perform remediation efforts and apply technical expertise to help clients regain operational stability and strengthen their defenses. Actively share knowledge with team members and stay up to date on industry trends. Build strong professional relationships and serve as a trusted advisor during client-facing incident response engagements. Work closely with the DFIR team to assess and determine the scope and impact of cyber incidents. Utilize experience with Active Directory, Group Policy Objects, ADSI, Windows Security, replication, Azure Active Directory Connect, and other relevant technologies to restore compromised systems. Script and automate recovery processes using PowerShell and Windows command line tools. Leverage experience in hypervisor technologies such as VMware, Hyper-V, Citrix XenServer, and Nutanix Acropolis to restore virtualized environments. Work with various server hardware platforms including HP, Dell, Nutanix, and Cisco UCS. Utilize experience with storage vendors such as Dell EMC, NetApp, HP/Nimble, and Pure Storage to recover data and systems. Implement backup solutions such as Veeam, Backup Exec, Unitrends, and Zerto to ensure data recovery. Manage desktop operating systems and deployments, including Windows 7/8/10/11. Oversee enterprise messaging systems, including Exchange and M365. Handle server-based computing environments, including Citrix and Terminal Services. Leverage networking knowledge, including core switches, wireless access points, firewalls, and VPN configurations. Implement two-factor and multi-factor authentication services such as Okta, DUO, Microsoft Authentication, Ping, RSA, and others. Collaborate with internal teams, external partners, and clients to refine and document all restoration and recovery efforts. Provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.