Principal Consultant, Restoration and Remediation
Core
Lead end-to-end recovery operations for complex cyber incidents including ransomware and large-scale breaches, advising executives on strategy while executing technical remediation.
Role type
Senior IC Principal Consultant (Cyber Incident Response & Restoration)
Builds
Production recovery operations and internal R&R capabilities for enterprise clients
Domain
Cybersecurity / Incident Response / IT Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise IT infrastructure leadership, Active Directory/Azure AD management, M365/Exchange administration, network reconfiguration, identity access recovery, endpoint security, backup solutions management, executive advisory, technical mentoring, threat actor behavior analysis
Preferred skills
Advanced cybersecurity certifications (CISSP, GCFA, MCSE, OSCP), proactive service design (tabletop exercises), infrastructure hardening
Technologies
Active Directory, Azure AD, M365, Exchange, VMware, Hyper-V, Citrix, Veeam, Zerto, Unitrends
Responsibilities
Lead end-to-end recovery operations for complex cyber incidents; Architect and manage technical remediation plans across hybrid infrastructure; Oversee restoration of identity services, messaging systems, and enterprise backup solutions; Advise client executives on remediation strategy and long-term resilience; Coordinate recovery workstreams across DFIR, IT, legal, and insurance stakeholders; Mentor senior and junior consultants on real-time client work; Document and review client-facing technical reports and lessons learned
Seniority
Principal, hands-on IC with mentorship responsibilities