Director, Post Breach Recovery – IR
Posted 45ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director Cybersecurity leading post-breach recovery engagements for a global cyber-attack response organization. Technical leadership during high-pressure cyber incidents to restore business operations.
Responsibilities:
- Lead technical recovery efforts during major cyber incidents
- Direct teams rebuilding compromised infrastructure and identity platforms
- Serve as a senior technical resource for complex recovery challenges
- Guide containment, eradication, and recovery operations
- Help design and execute secure rebuild strategies for enterprise environments
- Communicate clearly with executives, legal teams, and technical stakeholders
- Mentor and support consultants across multiple engagements
- Contribute to the development of recovery playbooks and frameworks
Requirements:
- 8+ years in cybersecurity, incident response, or enterprise infrastructure
- Strong technical background in enterprise systems and identity architecture
- Experience with Active Directory recovery and identity security
- Hands-on familiarity with EDR, containment strategies, and remediation workflows
- Experience leading technical teams during major cyber incident
- Ability to operate both strategically and hands-on when needed.
Benefits:
- Accommodations and adjustments throughout the interview process
- Equal opportunity employer


















