Director, Post Breach Recovery – IR

Posted 45ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Director Cybersecurity leading post-breach recovery engagements for a global cyber-attack response organization. Technical leadership during high-pressure cyber incidents to restore business operations.

Responsibilities:

  • Lead technical recovery efforts during major cyber incidents
  • Direct teams rebuilding compromised infrastructure and identity platforms
  • Serve as a senior technical resource for complex recovery challenges
  • Guide containment, eradication, and recovery operations
  • Help design and execute secure rebuild strategies for enterprise environments
  • Communicate clearly with executives, legal teams, and technical stakeholders
  • Mentor and support consultants across multiple engagements
  • Contribute to the development of recovery playbooks and frameworks

Requirements:

  • 8+ years in cybersecurity, incident response, or enterprise infrastructure
  • Strong technical background in enterprise systems and identity architecture
  • Experience with Active Directory recovery and identity security
  • Hands-on familiarity with EDR, containment strategies, and remediation workflows
  • Experience leading technical teams during major cyber incident
  • Ability to operate both strategically and hands-on when needed.

Benefits:

  • Accommodations and adjustments throughout the interview process
  • Equal opportunity employer