Senior Compromise Recovery / Cyber Recovery Specialist

About the role

We are seeking a senior professional to lead the recovery of enterprise environments after ransomware attacks and major cyber incidents. The role combines deep Microsoft infrastructure expertise with hands‑on experience in compromise remediation and post‑incident hardening.

Key responsibilities

• Administer systems, networks, storage and backup solutions in compromised environments.
• Lead cyber‑incident and ransomware recovery efforts, restoring services to operational state.
• Recover and rebuild Active Directory and Azure AD (Microsoft Entra ID) structures.
• Utilise Microsoft Defender and related security tools to contain threats.
• Perform backup restoration, disaster‑recovery testing, and secure data recovery.
• Implement Zero Trust principles and post‑incident hardening measures.

Required profile

• 10+ years of experience in IT infrastructure and cybersecurity.
• Strong background with Microsoft technologies (Windows Server, Azure, AD).
• Hands‑on involvement in ransomware or large‑scale cyber‑incident recovery.
• Proven experience rebuilding and securing AD/Azure environments after incidents.
• At least three of the following certifications: SC‑300, SC‑100, AZ‑104, AZ‑300/AZ‑301.

Required skills

• System administration
• Network administration
• Storage administration
• Backup administration
• Active Directory (AD) recovery
• Microsoft Entra ID / Azure AD
• Microsoft Defender ecosystem
• Azure infrastructure
• Zero Trust architecture
• Disaster recovery and backup restoration
• Ransomware recovery
• Identity & Access Management
• Cybersecurity architecture