Consultant, Restoration and Remediation (Remote)
Core
Restore compromised systems and execute remediation strategies during active cyber incidents to help clients regain operational stability.
Role type
Mid-level IC restoration and remediation consultant
Builds
Restored computing environments and hardened systems for incident response clients
Domain
Cybersecurity incident response / IT operations
Required skills
Systems administration, Windows/Linux/MacOS environment management, Active Directory, Group Policy, Exchange, VPN, firewall configuration, endpoint security tools, malware investigation, network troubleshooting, digital artifact collection
Preferred skills
DFIR collaboration, regulatory compliance knowledge, high-pressure problem solving
Technologies
Windows, Linux, MacOS, Active Directory, Exchange, Group Policy, VPN, firewalls, endpoint protection tools
Responsibilities
Restore compromised systems to pre-incident state including data recovery and configuration; Reimage, rebuild, and reconfigure endpoints, servers, and services; Troubleshoot network and infrastructure connectivity issues; Assist in collecting digital artifacts and forensic evidence; Document technical findings and lessons learned; Participate in 24/7 on-call support rotations