事后恢复/应急响应主管
Director, Post Breach Recovery/IR
职位描述：
CYPFER 是一家真正的网络安全应急响应组织，帮助客户在遭受网络攻击后以正确的方式迅速恢复业务。我们是勒索软件事件后恢复和网络安全事件首次响应领域的全球市场领导者。我们的成果远超行业统计数据中关于网络勒索和勒索软件事件的表现。我们的网络安全专业团队与知名全球保险公司、领先的律师事务所和财富 1000 强企业合作。
职位名称：后漏洞恢复/事件响应总监
我们正在寻找一位经验丰富的网络安全总监——后漏洞恢复/事件响应，负责领导复杂的漏洞后恢复和勒索软件恢复项目。
该职位需要一位技术领导者，能够在遏制和恢复过程中指导团队，同时在出现复杂问题时作为深入的技术资源。我们的顾问经常重建被入侵的企业环境，该总监将在领导项目和支持团队技术方向方面发挥关键作用。
理想的候选人具备扎实的基础设施和安全实践经验，并能在高压的网络安全事件中带领团队。
主要职责
- 在重大网络安全事件中领导技术恢复工作
- 指导团队重建受入侵的基础设施和身份平台
- 为复杂的恢复挑战提供高级技术资源支持
- 指导遏制、清除和恢复操作
- 协助设计和执行企业环境的安全重建策略
- 与高管、法务团队和技术利益相关者进行清晰沟通
- 在多个项目中指导和支持顾问
- 参与恢复操作手册和框架的开发
所需经验
- 8 年以上网络安全、事件响应或企业基础设施经验
- 在企业系统和身份架构方面有扎实的技术背景
- 具备 Active Directory 恢复和身份安全经验
- 熟悉 EDR、遏制策略和修复流程
- 有在重大网络安全事件中领导技术团队的经验
- 能够根据需要进行战略性和实际操作
优先条件
- 有领导勒索软件或大规模网络安全恢复项目的经验
- 有咨询或事件响应服务背景
- 有重建企业 Active Directory 或混合身份环境的经验
查看英文原文
About Us:
CYPFER is a true first-responder Cybersecurity organization enabling clients to return to business rapidly, the right way, following a cyber-attack. We are a global market leader in ransomware post-breach remediation and cyber-attack first response. We deliver results that far surpass market statistics for cyber-extortion and ransomware events. Our team of cybersecurity professionals works with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses.
Director, Post Breach Recovery/IR
We are looking for an experienced Director, Cybersecurity - Post Breach Recovery/IR to lead complex post-breach remediation and ransomware recovery engagements.
This role requires a technical leader who can guide teams through containment and recovery while also serving as a deep technical resource when complex problems arise. Our consultants regularly rebuild compromised enterprise environments, and this Director will play a key role in both leading engagements and supporting the technical direction of the team.
The ideal candidate brings strong hands-on infrastructure and security experience combined with the ability to lead teams during high-pressure cyber incidents.
Key Responsibilities
- Lead technical recovery efforts during major cyber incidents
- Direct teams rebuilding compromised infrastructure and identity platforms
- Serve as a senior technical resource for complex recovery challenges
- Guide containment, eradication, and recovery operations
- Help design and execute secure rebuild strategies for enterprise environments
- Communicate clearly with executives, legal teams, and technical stakeholders
- Mentor and support consultants across multiple engagements
- Contribute to the development of recovery playbooks and frameworks
Required Experience
- 8+ years in cybersecurity, incident response, or enterprise infrastructure
- Strong technical background in enterprise systems and identity architecture
- Experience with Active Directory recovery and identity security
- Hands-on familiarity with EDR, containment strategies, and remediation workflows
- Experience leading technical teams during major cyber incident
- Ability to operate both strategically and hands-on when needed
Preferred Qualifications
- Experience leading ransomware or large-scale cyber recovery engagements
- Background in consulting or incident response services
- Experience rebuilding enterprise Active Directory or hybrid identity environments
- Familiarity with Entra ID, modern identity platforms, and cloud infrastructure
If you thrive in high-stakes environments and want to help organizations rebuild after major cyber incidents, we’d love to hear from you.
CYPFER is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.
We thank you for your interest in joining the CYPFER team! While we welcome all applicants, only those who are selected for an interview will be contacted.
Originally posted on Himalayas