Compromise Recovery Specialist

Job Title: Compromise Recovery Specialist
Domain: Remediation and Recovery
Experience: 10 Years
Location: Qatar

We are looking for an experienced Compromise Recovery Specialist to lead and support recovery activities following cybersecurity incidents and compromises. The ideal candidate will have strong enterprise infrastructure administration experience across systems networks storage backup identity and Microsoft security technologies along with proven hands-on experience in cyber incident and ransomware recovery.

• Lead and support recovery activities following cybersecurity incidents and system compromises.
• Perform system network storage and backup administration activities required for secure recovery.
• Develop and execute recovery strategies following ransomware and other cyber incidents.
• Support restoration of compromised systems applications identities and infrastructure.
• Work with backup and recovery solutions to restore critical business services.
• Support Zero Trust recovery and secure post-compromise restoration activities.
• Assess compromised environments and identify appropriate remediation and recovery actions.
• Work across the Microsoft security ecosystem including:
  • Active Directory (AD)
  • Microsoft Entra ID
  • Microsoft Defender
• Coordinate with cybersecurity infrastructure network and IT teams during recovery activities.
• Ensure recovered systems are securely restored and operational.
• Document recovery activities lessons learned and remediation actions.

• 10 years of relevant professional experience.
• Bachelor's degree in Computer Science Information Technology Engineering or a related field.
• Strong experience in:
  • System Administration
  • Network Administration
  • Storage Administration
  • Backup & Recovery
  • Cyber Incident Recovery
  • Ransomware Recovery
  • Zero Trust Recovery
• Strong hands-on experience with the Microsoft technology stack particularly:
  • Active Directory
  • Microsoft Entra ID
  • Microsoft Defender
• Proven track record of handling actual cybersecurity compromise and recovery scenarios.

Candidates must hold at least 3 of the following certifications:

• SC-300
• SC-100
• AZ-300 / AZ-301
• AZ-104