Cybersecurity Consultant

$70,000 - $70,000/Yr

Cypfer Corp. - Houston, TX

Full-time - Mid Level

Remote - Houston, TX

About the position

The Cybersecurity Consultant at CYPFER plays a crucial role in assisting clients with incident recovery following cyber-attacks. This position involves engaging with various stakeholders, utilizing forensic tools, and restoring affected systems to ensure clients can swiftly return to business operations. The consultant will work remotely but must be prepared to travel to client sites as needed, demonstrating flexibility and readiness to respond to urgent situations.

Responsibilities

• Engage in cybersecurity incident recovery tasks, interacting with insurance partners, legal counsel, incident response units, client executives, and technical teams.
• Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems.
• Perform basic triage of system configurations and forensic artifacts to assess compromise and support the forensic team.
• Decrypt, verify, and validate encrypted data.
• Restore, recover, troubleshoot, and rebuild physical and virtual Windows & Linux servers impacted by ransomware or other cybersecurity incidents.
• Create and deploy golden images using Acronis or similar solutions.
• Deploy and manage EDR/XDR products, including SentinelOne, Crowdstrike, and Cortex.
• Collaborate and communicate with team members to ensure the highest quality of service.
• Occasionally lead small engagements, primarily serving as a member of a larger team.
• Basic firewall administration, including reviewing logs and creating/editing policies on NGFWs.
• Participate in a rotating on-call schedule and work on weekends and outside normal business hours as needed.

Requirements

• 2+ years of experience in technical support, system administration, or a similar role.
• Working knowledge of OSI Model, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, SMTP, FTP, TFTP).
• Experience building and managing Windows Server, including creating Domain Controllers and troubleshooting DNS, DHCP, GPO, FSMO, and NTP services.
• Basic understanding of MS Exchange and MS SQL operations.
• Experience installing Linux operating systems and understanding Linux networking.
• Experience managing virtualization environments, including vSphere, MS Hyper-V, and Nutanix.
• Ability to set up VLANs effectively in a networking environment.
• Basic understanding of next generation firewalls operations.
• Understanding and management of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS.
• Working knowledge and experience with backup and restore solutions.

Nice-to-haves

• Proactive risk assessment and troubleshooting abilities.
• Knowledge and understanding of DFIR, threat hunting, and cybersecurity principles.
• Knowledge of EDR/XDR products.
• Experience in supporting hybrid and cloud environments - Azure, AWS, etc.
• Linux and Apple OS X troubleshooting experience.
• Industry certifications such as MCP, Network+, Security+, CCNA, or similar.

Benefits

• Base salary and multiple bonus opportunities.
• Remote work flexibility.
• Equal opportunity employer with an inclusive work environment.