- Assess and harden internal environments including network segmentation, access controls, identity, and endpoint security.
- Design and execute safe room / clean room recovery plans.
- Run tabletop and live recovery exercises simulating ransomware and data-destruction scenarios.
- Define and test incident response playbooks and recovery runbooks.
- Validate snapshot and backup restore workflows using Veeam, Commvault, Rubrik, and similar platforms.
- Assess access controls and security posture across environments.
- Produce outbound-ready content describing cyber resilience and recovery approaches
Required Qualifications
- Solid hands-on cybersecurity background in security engineering or incident response.
- Direct experience planning and executing protected room or clean room recovery exercises.
- Strong understanding of enterprise data protection, backup, and recovery concepts.
- Experience creating incident response playbooks and recovery runbooks.
Preferred Qualifications
- CISSP, GCIH, GDAT, or similar certifications.
- Experience with ransomware recovery in enterprise storage and backup environments.