Incident Recovery Consultant

IR Full Time Remote, Remote, US

Incident Recovery Consultant

Avertium is seeking a candidate that will be responsible for helping clients recover from cyberattacks and return to normal business operations as soon as possible. This requires expertise in a wide range of technologies, the ability to operate under pressure , take control of the situation and build confidence that there is a path forward for clients facing one of worst days of their career.

This role is an extension of an existing business line, as a result there is a significant opportunity to build the practice with significant support from the company. You will be expected to master a wide range of technologies and build out processes and toolsets to rapidly rebuild and restore systems that have been damaged following a security incident. You will also need to be able to evaluate the security risks posed by bringing systems back online , implement controls to minimize those risks and communicate the justification for your recommendations to clients with varying levels of technical expertise .

• Identify and prioritize actions needed to contain threats and return to business as normal as quickly as possible.
• Manage the restoration process.
• Provide onsite or remote support in rebuilding and restoring servers, workstations , and applications.
• C ollect and preserve potential evidence.
• Identify and document security and related deficiencies that need to be remediated.
• Provide leadership in building out the recovery team.

• Excellent written and verbal communication skills .
• Demonstrated ability to communicate complex technical skills to a non-technical audience.
• Experience designing, configuring, and managing Microsoft Active Directory .
• Experience in designing, configuring, and managing cloud environments .
• Strong interpersonal and leadership skills .
• A solid grasp of networking and core Internet protocols ( e .g., TCP/IP, DNS, SMTP, HTTP, SMB , and distributed networks) .
• Solid understanding of current attack vectors and containment measures .
• Experience with on-prem and cloud backup and recovery software and systems.

• Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&CK Framework .
• Familiarity with incident response investigations .
• Experience with digital forensic tools .
• Experience handling security incidents in the cloud.

• B achelor's degree in computer science, information technology, business management or related field is preferred.
• Relevant Graduate degree is highly regarded.
• Industry certifications or training in security, cloud services , networking and r incident response
• Minimum ten years' experience in information technology role, with significant experience in system administration and cloud platforms.