Principal Consultant, Incident Recovery Operations (Unit 42)
Core
Lead technical engagements to help clients recover from security incidents and build effective security operations programs.
Role type
Principal Consultant (Incident Recovery & Remediation)
Builds
Secure network topologies, hardened infrastructure, and remediation workflows for enterprise clients.
Domain
Cybersecurity, Incident Response, Cloud Security, Identity Management
Deliverable
client delivery
Required skills
Incident Response remediation, network engineering, system administration, virtualization, identity management, SSO, modern authentication, enterprise security controls, Microsoft Active Directory, Azure AD, hybrid-cloud security, Infrastructure as Code (IaC), Terraform, Ansible, Packer, data integrity preservation
Preferred skills
Security frameworks (NIST CSF, CIS, HIPAA, PCI DSS), Windows/Linux hardening, OSX enterprise security, executive stakeholder management, multi-project team leadership
Technologies
Terraform, Ansible, Packer, Jenkins, Azure AD, Active Directory
Responsibilities
Lead complex Incident Response remediation engagements; collaborate with Incident Response Leads to address risks; develop remediation workflows and strategic roadmaps; architect and execute server/workstation rebuilding via IaC; design secure network topologies and infrastructure hardening; create reports for technical and executive stakeholders; communicate remediation strategies to clients and counsel; ensure data integrity for forensic workflows
Seniority
Principal, hands-on IC with management responsibilities
