Principal Consultant, Restoration and Remediation - Remote

Overview

As a Principal Consultant on the Restoration and Remediation team, you’ll lead Surefire Cyber’s most complex and sensitive post-incident recovery engagements, advising clients on restoration strategy and overseeing technical execution.

In Short

• Lead end-to-end recovery operations for complex cyber incidents.
• Architect and manage technical remediation plans across hybrid infrastructure.
• Oversee restoration of identity services, messaging systems, and backup solutions.
• Advise client executives on remediation strategy and recovery timelines.
• Coordinate recovery workstreams across various stakeholders.
• Act as technical escalation point during recovery engagements.
• Mentor junior consultants on real-time client work.
• Document and review client-facing technical reports.
• Contribute to the evolution of recovery methodologies.
• Participate in after-hours response rotations during major incidents.

Requirements

• 10+ years of professional experience in cybersecurity or incident response.
• Proven leadership in guiding enterprise-scale recovery efforts.
• Deep hands-on experience with Active Directory, Azure AD, and M365.
• Expert understanding of infrastructure reconfiguration and network segmentation.
• Ability to architect and execute remediation plans.
• Strong communication skills for advising stakeholders.
• Experience mentoring and growing technical talent.
• Familiarity with attacker TTPs and threat actor behaviors.
• Demonstrated expertise in cybersecurity and incident response.
• Advanced certifications (e.g., CISSP, GCFA) are preferred.

Benefits

• Competitive compensation and total rewards package.
• Remote workforce.
• Generous paid time off and holidays.
• Paid parental leave.
• Employer paid premiums for medical, dental, and vision.
• Comprehensive health benefits and 401K matching.
• Professional development and career advancement opportunities.
• Ongoing coaching, clear feedback, and recognition.