Full-Time

Restoration and Remediation Consultant

Updated on 8/17/2026

Surefire Cyber

Surefire Cyber

51-200 employees

Incident response and cyber resilience services

No salary listed

Remote in USA

Remote

Category
IT & Security (1)
Required Skills
Malware Analysis
Incident Response
LDAP
Microsoft Windows
Computer Networking
Cybersecurity
Linux/Unix

Get referred to Surefire Cyber

See people who can refer or advise you

Requirements
  • Foundational knowledge of Windows, Linux, and macOS environments and their security features.
  • Experience with firewalls, virtual private networks, Active Directory, Group Policy, Exchange, and common endpoint security tools.
  • Understanding of cyber incident impact, attacker techniques, and indicators of compromise.
  • Strong technical troubleshooting skills.
  • Excellent written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders.
  • Ability to manage competing tasks, adapt quickly to changing scenarios, and contribute in high-pressure situations.
  • Availability to participate in after-hours, on-call, and weekend rotational support when needed.
Responsibilities
  • Support post-incident recovery efforts by collaborating with Digital Forensics and Incident Response teams to assess the scope and impact of cyber incidents.
  • Restore compromised systems to a pre-incident state, including data recovery, system configuration, and hardening.
  • Assist in developing and executing tailored remediation plans based on technical, operational, and regulatory requirements.
  • Reimage, rebuild, and reconfigure endpoints, servers, Active Directory, Exchange, Group Policy, VPNs, and affected services.
  • Use systems administration skills to restore and configure computing environments.
  • Troubleshoot network issues and help resolve infrastructure-level connectivity or access problems.
  • Contribute to the collection of digital artifacts and forensic evidence in support of incident response.
  • Investigate and address malware infections, unauthorized access, and system integrity issues.
  • Implement endpoint protection and access control tools under the supervision of senior Restoration and Remediation team members.
  • Document actions taken, technical findings, decisions, and lessons learned in a clear, structured format.
Desired Qualifications
  • Hands-on experience restoring compromised systems and implementing remediation strategies.
  • Experience in IT engineering, systems administration, cybersecurity consulting, or a related technical role.
  • Experience collaborating with Digital Forensics and Incident Response teams.
  • Experience with malware infections, unauthorized access, and system integrity issues.

Surefire Cyber provides incident response, pre-incident preparation, and post-incident recovery services to organizations dealing with cyber threats. It helps clients prepare through risk assessments and resilience planning, respond during a cyber attack to mitigate damage and stabilize operations, and recover afterward to restore normal functionality. Its approach combines crisis management, deep cyber experience, and a focus on critical thinking and empathy, all delivered with transparent pricing and clear communication. This makes it distinct from competitors who may not emphasize these values or price transparency as strongly, and it targets corporate, government, and other data-sensitive clients seeking robust cyber resilience. The company's goal is to help organizations effectively manage, withstand, and bounce back from cyber incidents with minimal downtime and clear, trustworthy guidance.

Company Size

51-200

Company Stage

Series A

Total Funding

$10M

Headquarters

Hanover, Maryland

Founded

2022

Get referred to Surefire Cyber

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Mar. 16, 2026 Cyber Insurance Awards finalist status strengthens buyer confidence and brand.
  • Its claims-ready reporting directly reduces insurer and breach-counsel coordination friction during incidents.
  • AI automation plus expert-led delivery promises faster response and higher margins than pure consulting.

What critics are saying

  • Crowded DFIR market lets CrowdStrike, Mandiant, and Unit 42 compress pricing and talent.
  • Insurance-driven workflow dependence exposes revenue concentration if carriers standardize around internal panels.
  • AI platform execution failure would trap Surefire as a small services shop; scaling stalls by 2027.

What makes Surefire Cyber unique

  • Feb. 9, 2026 platform unifies intake, forensics, restoration, claims, and intelligence.
  • May 18, 2026 Admiral Michael S. Rogers added national-security credibility and insurance access.
  • June 18, 2026 AI Advisory Board ties product design to insurers, brokers, and lawyers.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) Retirement Plan

401(k) Company Match

Unlimited Paid Time Off

Remote Work Options

Paid Parental Leave

Professional Development Budget

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

-1%

2 year growth

2%
Citybiz
Jun 18th, 2026
Surefire Cyber launches AI Advisory Board to shape incident response platform.

Surefire Cyber launches AI Advisory Board to shape incident response platform. June 18, 2026 Surefire Cyber has formed an AI Advisory Board composed of leaders from the cyber insurance, brokerage and legal sectors to help guide the development of its AI-enabled incident response platform and align it with the operational needs of organizations managing cyber events. The New York-based digital forensics and incident response (DFIR) firm said the advisory board will provide strategic input as the company expands a platform designed to unify the insurance-driven cyber response process, connecting stakeholders across forensic investigations, restoration efforts, claims management and cyber intelligence workflows. The initiative comes as cyber incidents continue to grow in frequency, complexity and cost, placing increasing pressure on insurers, law firms, brokers and response providers to coordinate more efficiently. Surefire Cyber argues that while cyber threats have evolved rapidly, the operational infrastructure supporting incident response has remained fragmented, creating delays and inefficiencies throughout the claims and recovery process. "We are building a platform that changes how the industry experiences cyber incidents," said Billy Gouveia, Chief Executive Officer of Surefire Cyber. "We are applying automation and AI across the entire lifecycle, and we are doing it alongside the people who know what that has to look like to actually work. The AI Advisory Board is how we stay accountable to the people we serve." According to the company, the platform is being developed to provide real-time visibility, claims-ready intelligence and AI-powered insights throughout the lifecycle of a cyber incident. Rather than functioning solely as a communications tool, the system is intended to connect the operational, investigative and insurance-related components of incident response within a single environment. The advisory board will work directly with Surefire Cyber leadership and product teams, offering guidance on regulatory considerations, claims workflows, legal requirements and practical implementation challenges. Members will draw on their experience managing cyber claims, coordinating breach response efforts and advising clients during security incidents. To help oversee the initiative, Surefire Cyber has engaged Caroline McGlynn, Esq., to provide leadership and strategic guidance to the board. McGlynn brings more than 20 years of experience spanning litigation, consulting and cyber incident response. Her role will focus on governance and ensuring that platform development reflects the legal, operational and business realities faced by organizations responding to cyber events. The advisory board follows two other strategic initiatives announced by the company this year. In February 2026, Surefire Cyber unveiled its incident response platform, and in May it appointed Admiral (Ret.) Michael S. Rogers as a strategic advisor. Together, those moves reflect the company's broader effort to build technology and advisory capabilities aimed at modernizing cyber incident response. As insurers and enterprises increasingly seek ways to manage cyber risks more efficiently, artificial intelligence is becoming a growing area of investment across claims administration, forensic analysis and operational coordination. Surefire Cyber's approach focuses on integrating AI into existing response workflows while maintaining expert oversight and decision-making throughout the process. The company said the AI Advisory Board is intended to ensure its technology evolves in partnership with the stakeholders who rely on cyber response services every day. By incorporating direct feedback from insurance carriers, brokers and legal professionals, Surefire Cyber aims to develop tools that improve visibility, accelerate response times and streamline coordination during cyber incidents. Surefire Cyber provides digital forensics, incident response and cyber recovery services for organizations and insurers. The company's platform combines automation, cyber intelligence and response expertise to help clients investigate, manage and recover from cyber events while supporting insurance-driven response programs at scale.

Yahoo Finance
May 18th, 2026
Admiral Michael S. Rogers joins Surefire Cyber as strategic advisor to strengthen AI-powered incident response

Surefire Cyber, a digital forensics and incident response firm, has named Admiral (Ret.) Michael S. Rogers as a strategic adviser. Rogers previously served as Director of the National Security Agency and Commander of U.S. Cyber Command from 2014 to 2018, and currently sits on the board of cyber risk analytics firm CyberCube. During his 37-year naval career, Rogers helped transform U.S. Cyber Command into a unified combatant command. Since retiring, he has advocated for collaboration between insurers and enterprises on cyber risk mitigation strategies. In his new role, Rogers will advise on Surefire Cyber's growth strategy, bringing expertise in national security, artificial intelligence and the cyber insurance market. The company specialises in AI-powered incident response services for the insurance sector.

Surefire Cyber
May 18th, 2026
Surefire Cyber names Admiral (Ret.) Michael S. Rogers as a Strategic Advisor.

Surefire Cyber names Admiral (Ret.) Michael S. Rogers as a Strategic Advisor. Former NSA Director and Commander of U.S. Cyber Command to Strengthen Market Presence and Bring Unmatched Insight to Surefire Cyber's AI-Powered Incident Response New York, NY May 18, 2026 - Surefire Cyber, a leading digital forensics and incident response (DFIR) firm, today announced that Admiral (Ret.) Michael S. Rogers has joined the company as a Strategic Advisor. A retired four-star U.S. Navy Admiral, former Director of the National Security Agency (NSA), and former Commander of U.S. Cyber Command (USCYBERCOM), Admiral Rogers is one of the most respected and recognized figures in cybersecurity. His appointment brings a strategic perspective shaped by decades at the forefront of cyber defense and intelligence, including a deep understanding of the cyber threat landscape and the critical role the insurance industry plays in organizational resilience. From 2014 to 2018, Admiral Rogers served concurrently as NSA Director, USCYBERCOM Commander, and Chief of the Central Security Service, helping transform U.S. Cyber Command into a unified combatant command that promoted defend forward strategies. His 37-year naval career also included roles as Commander of U.S. Fleet Cyber Command and Director of Intelligence for the Joint Chiefs of Staff. Since retiring, he has served on the board of CyberCube, a leading cyber risk analytics firm for the insurance industry, where he has been a consistent voice on how insurers and enterprises must collaborate to build stronger cyber risk mitigation strategies. He has also spoken widely on artificial intelligence as both an emerging threat vector and an essential defensive capability. "The cyber threat environment has never been more complex, and the stakes for businesses have never been higher. Surefire Cyber is doing something genuinely different. The combination of expert-led judgment, AI-enabled speed, and claims-ready intelligence is exactly what the insurance ecosystem demands today and what the broader market will require tomorrow. I am looking forward to helping amplify their leadership and accelerate their impact in the market." Admiral (Ret.) Michael S. Rogers As a Strategic Advisor, Admiral Rogers will bring his singular vantage point on national security, AI, and the cyber insurance market to bear on Surefire Cyber's growth strategy. His experience operating at the highest levels of cyber defense, combined with his deep engagement with the insurance sector, gives him rare insight into what the market needs. That perspective will directly inform how Surefire Cyber strengthens its position as the trusted choice. "Admiral Rogers has spent his career at the intersection of cyber threat intelligence, national defense, and the evolving insurance ecosystem. His insight into where the market is headed and what it demands from a response partner is invaluable as we continue to build the infrastructure this industry has needed. Cyber incidents should be manageable events, not defining moments, and Admiral Rogers understands exactly what it takes to make that a reality." Billy Gouveia, Chief Executive Officer, Surefire Cyber Admiral Rogers' appointment follows Surefire Cyber's February 2026 announcement of significant advances to its incident response platform, the first system to unify the full insurance-driven response lifecycle from intake through invoice. Surefire Cyber is advancing how insurance carriers, law firms, and insureds experience cyber incidents, enabling them to plan, respond, and recover with greater confidence, reduced business interruption, and actionable intelligence. By integrating forensic investigation, restoration, claims coordination, and cyber intelligence into one connected system, the platform transforms incident response from isolated technical work into portfolio-level risk intelligence. Share the article. There has been significant discussion about how threat actors may use artificial intelligence, but far less visibility into how these techniques are actually appearing in real world attacks. May 13, 2026 Payouts King is an emerging ransomware group using social engineering, legitimate tools, and sustained pressure to drive payment, prioritizing access and persistence over technical complexity. April 30, 2026 The Gentlemen is a ransomware group that emerged in mid-2025, operating a double-extortion model that encrypts victim environments while exfiltrating sensitive data to increase ransom pressure. April 20, 2026

PR Newswire
Feb 7th, 2024
Lmg Security And Surefire Cyber Announce Partnership To Bolster Proactive Cybersecurity And Incident Response Services

MISSOULA, Mont., Feb. 7, 2024 /PRNewswire/ -- LMG Security, an internationally recognized cybersecurity consulting firm, and Surefire Cyber, a cyber Digital Forensics and Incident Response (DFIR) provider, are pleased to announce a strategic partnership to deliver both proactive and response services to their clients. By partnering, customers of both organizations have access to industry-leading proactive cybersecurity services and solutions to prevent cyber threats, as well as tech-enabled incident response services that accelerate forensic results, improve communication, and reduce business disruption."We are excited to partner with Surefire Cyber," said Sherri Davidoff, CEO of LMG Security. "Their innovative incident response model is the perfect complement to LMG's proactive cybersecurity services," stated Davidoff. "Together, we can offer our clients a well-rounded cybersecurity program, including LMG's proactive penetration testing, compliance, and training as well as Surefire Cyber's swift and effective incident response capabilities.""I am thrilled to be working alongside Sherri and her team to help our clients," said Surefire Cyber CEO, Billy Gouveia. "By partnering with LMG Security, both of our firms' clients can better manage their cyber risk

The Insurer
Jan 8th, 2024
Aspen launches cyber risk services offering for primary cyber insureds

Bermuda-based carrier Aspen Insurance Holdings has partnered with Surefire Cyber to launch Aspen Cyber Risk Services, a suite of services designed to enable its primary cyber insureds to address cybersecurity threats.