Cyber Recovery Engineer

Cyber Recovery Engineer

Location: Chicago, IL - 3 days onsite a week

Duration: 12 Months

Experience Level: Senior

The Cyber Recovery Engineer is an entry-to-mid-level technical role supporting the design, operation, and testing of the organization's cyber recovery program within a regulated financial services environment. You will work alongside senior engineers and program leads to build hands‑on proficiency in isolated recovery environments (IRE), clean room operations, backup platform management, and regulatory documentation.

This role is intentionally structured to develop the next generation of cyber recovery practitioners. You bring foundational infrastructure or security skills, exposure to a financial institution or highly regulated environment, and a genuine interest in the intersection of resilience engineering and regulatory compliance. You will be expected to grow into independent ownership of recovery work streams within 12-18 months.

• 7-10 years of experience in infrastructure engineering, IT operations, or a security‑adjacent technical role.
• Experience at a financial institution (bank, broker‑dealer, asset manager, insurance firm, or equivalent regulated entity), OR in a similarly regulated environment (healthcare, utilities, government).
• Exposure to disaster recovery or backup operations - including participating in DR tests, managing backup jobs, or executing restore procedures.
• Familiarity with at least one enterprise backup or replication platform:
  Cohesity, Rubrik, Veeam, Zerto, Commvault, or Net Backup.
• Basic scripting ability in Python, Bash, or Power Shell; comfort running and modifying existing scripts.
• Understanding of core networking concepts (VLANs, firewall rules, DNS, routing) relevant to isolated environment configuration.
• Strong documentation habits; ability to write clear, accurate technical procedures and test records.
• Awareness of regulatory frameworks such as FFIEC, NIST CSF, or NYDFS as they apply to technology and resilience.

• Direct participation in an IRE or clean room recovery exercise, even in a supporting capacity.
• Exposure to regulatory examinations or audit walkthroughs in a technology or cybersecurity context.
• Familiarity with IaC tooling:
  Terraform, Ansible, or equivalent configuration management platforms.
• Coursework or self‑study in cybersecurity, resilience engineering, or cloud infrastructure.
• Certifications (in progress or completed):
  CompTIA Security+, CySA+, AWS/Azure fundamentals, or vendor backup platform training.
• Experience with ticketing, change management, and ITSM workflows (Service Now or equivalent).
• Exposure to ransomware response or cyber incident response tabletop exercises.

• Assist in maintaining and operating the Isolated Recovery Environment (IRE) and clean room infrastructure under senior engineer guidance.
• Execute assigned steps in recovery runbooks during tabletop exercises, simulation drills, and full recovery tests.
• Document recovery test procedures, results, and deviations; flag anomalies to senior team members for triage.
• Support forensic validation tasks within the IRE, including integrity checks and configuration comparisons prior to production re-entry.
• Learn and apply clean room protocols, including network isolation verification and identity access controls during recovery scenarios.

• Perform day‑to‑day operational tasks across enterprise backup and replication platforms (e.g., Cohesity, Rubrik, Veeam, Zerto, or equivalent).
• Monitor backup job health, investigate failures, and escalate persistent issues with documented findings.
• Assist in configuring and validating backup policies, retention schedules, and replication targets for critical systems.
• Support testing of restore procedures for servers, databases, and applications; record RTO/RPO outcomes against targets.

• Assist in preparing evidence packages, control narratives, and test result documentation for regulatory examinations and internal audits.
• Maintain…