[Hiring] Consultant, Restoration and Remediation @Surefire Cyber

Role Description

As a Consultant on the Restoration and Remediation (R&R) team, you’ll contribute technical expertise during active incidents — helping clients recover from ransomware, malware infections, and breaches. You’ll execute remediation tasks, restore systems, and collaborate with forensic analysts to support response efforts.

• Support post-incident recovery efforts, collaborating with DFIR teams to assess the scope and impact of cyber incidents.
• Participate in restoring compromised systems to a pre-incident state, including data recovery, system configuration, and hardening.
• Assist in developing and executing tailored remediation plans based on technical, operational, and regulatory requirements.
• Reimage, rebuild, and reconfigure endpoints, servers, and affected services such as Active Directory, Exchange, Group Policy, and VPN.
• Use systems administration skills to restore and configure computing environments.
• Troubleshoot network issues and assist in resolving infrastructure-level connectivity or access problems.
• Contribute to the collection of digital artifacts and forensic evidence, supporting broader incident response.
• Apply foundational knowledge to investigate and address malware infections, unauthorized access, and system integrity issues.
• Implement endpoint protection and access control tools under supervision from senior R&R team members.
• Document all actions taken in a clear, structured format, capturing technical findings, decisions made, and lessons learned.
• Participate in after-hours (on-call/weekend rotational) support when needed to ensure 24/7 incident response coverage.

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent experience in technical support or IT administration roles.
• Foundational knowledge of Windows, Linux, and MacOS environments and their security features.
• Experience with firewalls, VPNs, Active Directory, Group Policy, Exchange, and common endpoint security tools.
• Understanding of cyber incident impact, attacker techniques, and indicators of compromise (IOCs).
• Strong technical troubleshooting skills and a proactive, team-first attitude.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
• Ability to manage competing tasks, adapt quickly to changing scenarios, and contribute in high-pressure situations.

Requirements

• Expertise in all these areas is not required, but you should be excited by the opportunity to learn new things.
• Comfortable working with other team members to expand your knowledge base and experience.
• We invite you to apply even if you do not feel you have mastery in all the requirements listed on the job description.

Interview Process

• Submit application on our website.
• Preliminary phone interview with the People Team (approx., 30 mins).
• Virtual/Teams Interview with Restoration Team Members.
• Virtual/Teams interview with hiring leader/Director of R&R (approx., 45 minutes).
• Take Home Mock Scenario (approx., 45 minutes).
• Virtual/Teams interview with the Chief Delivery Officer.
• Virtual/Team interview with our CEO.

Benefits

• Competitive compensation plan and total rewards package for team members.
• Remote workforce.
• Generous paid time off plan and floating holidays.
• Paid parental leave.
• Employer paid premiums for both team members and their dependents for medical, dental, and vision.
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.
• Professional development and career advancement opportunities.
• We prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth.