Principal Consultant, Incident Recovery Operations (Unit 42)
Core
Lead recovery efforts from major outages, ransomware attacks, and breaches, making rapid, high-stakes decisions with incomplete information during active crises.
Role type
Senior IC incident recovery consultant
Builds
Unified recovery strategies and business continuity plans for clients
Domain
Cybersecurity / Incident Response
Deliverable
client delivery
Required skills
Crisis leadership, executive communication, technical decision-making under pressure, cross-functional team alignment, improvisation, AI utilization for security solutions
Preferred skills
Active Directory security architecture, identity recovery, Microsoft Entra ID, EDR/XDR, cloud security (AWS/Azure/GCP), Infrastructure as Code, virtualization hardening
Technologies
PingCastle, BloodHound, Purple Knight, Terraform, Ansible, Packer, VMware vSphere/ESXi, Hyper-V, NIST CSF, CIS Benchmarks
Responsibilities
Lead recovery efforts from major outages, ransomware attacks, and breaches; Make rapid, high-stakes decisions with incomplete information; Determine whether to repair existing infrastructure or rebuild from scratch; Translate complex technical risks into clear business terms; Direct and align cross-functional, non-reporting teams; Improvise effective recovery strategies when standard plans fail
Seniority
Senior, hands-on IC
