CYFOR Group Careers

Start you career with the leading experts

Cyber Incident Response – IT Recovery Specialist

Job Description

CYFOR is a leading nationwide provider of cyber security services, digital forensics and eDiscovery. Providing services to all business sectors, including law firms, insurance providers and law enforcement agencies, CYFOR are looking for talented cyber security professionals to lead the growth of our cyber security services.

Here at CYFOR we look for people who can make a real difference, passionate and high performing people who thrive on technology and thinking outside the box.

Our employees are what makes CYFOR truly great, and as they grow so do we.

So if you’d like a varied and highly fulfilling role, working with great colleagues in a fantastic atmosphere, we’d like to hear from you.

The Role 

We are looking for an experienced Incident Response Recovery Specialist to work within our incident response team. This role will focus on helping clients who have been impacted by cyber incidents recover their technical estate and resume business activities.

Key to success in this role will be your ability to quickly understand and troubleshoot novel network infrastructures, calmly and professionally communicate with clients and configure well-known on-premise and cloud based infrastructure.

The ideal candidate will have at least 5 years’ experience, and demonstrable knowledge, in the following areas:

  • Windows server infrastructure; including Active Directory, Domain Controllers, and Exchange Server
  • Cloud equivalents of the above, including Office 365 and Azure/Entra.
  • Network connected devices such as firewalls, VPNs and switches.
  • Backup systems, including Veeam.
  • Virtualization systems, including VMWare and Hyper-V.

The main responsibilities of the role will be:

  • Assisting clients with infrastructure remediation and rebuilds following a cyber incident.
  • Collaboration with incident response investigators to prevent future incidents.
  • Segmentation of existing infrastructure during a cyber incident.
  • Calm and collected incident management.
  • Collection of forensic evidence, such as firewall and authentication logs.
  • Migrating existing infrastructure to more secure alternatives, such as on-premise data migration to cloud services.
  • Automating recovery activities using PowerShell and other relevant command line interfaces

You will also be required to:

  • Travel at short notice to perform on-site recovery services.
  • Demonstrate excellent written and verbal communication skills.
  • Demonstrate a high level of accuracy and attention to detail.
  • Demonstrate a flexible approach to work with a high level of self-motivation and organisation.
  • Exercise discretion and confidentiality

In joining CYFOR, you will receive a salary commensurate with experience, training across cyber security disciplines such as incident response, auditing and forensic investigations, and excellent career prospects within a growing cyber security team. You will also receive:

  • Annual Subscriptions (from a choice of Netflix, Amazon Prime, Spotify, Magazine Subscriptions etc.)
  • An annual anniversary gift, rising in value each year.
  • Bupa Cash Plan (or equivalent)
  • CYFOR’s statutory pension scheme
  • An extra day’s holiday for your birthday
  • Loyalty bonuses. 3 years – £300. 5 years- £500. 10 years -£1,000 bonus.
  • Multiple free social events throughout the year, including a CYFOR Family Day.
  • Free month-end lunches

Please note that this role will require security clearance to SC level. If you are not already a holder of SC clearance, you will be required to undergo vetting.

As an equal opportunities employer, CYFOR welcome applicants from all sections of the community regardless of gender, ethnicity, disability, sexual orientation and transgender status. All appointments are made on merit.

Salary – £50,000 to £65,000 depending on experience.

Apply for this job by completing the form and uploading your CV.

Back to all Careers

Apply for this job

Simply complete the form and upload your CV to apply!

    To be considered for the role and to pass security vetting you must have been a permanent UK resident for more than 5 years.
  • Tell us more about you and your skills
  • We collect and process information relating to job applicants as part of the recruitment process. More information may be found here:
    Accepted file types: pdf, Max. file size: 20 MB.

Send an enquiry to our experts

After submitting an enquiry, a member of our team will be in touch with you as soon as possible

Your information will only be used to contact you, and is lawfully in accordance with the General Data Protection Regulation (GDPR) act, 2018.