Director, Post Breach Recovery/IR

{
  "content_hash": "f732e7c88dd5e2263e0d94667086b1d99a2c3dd5437924462a5787ff050e45ad",
  "source_hash": "49a6e9b9023fb8a9ba17c76c91ec5ea4e9d9e57131ed7735221b4ca056cd2878",
  "last_changed_at": "2026-05-30T05:59:36.233Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Miami, Florida, United States",
    "city": "Miami",
    "region": "FL",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T10:25:30.550Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Miami, Florida, United States",
      "city": "Miami",
      "region": "FL",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "hybrid",
  "salary_period": null,
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "110",
    "isRemote": null,
    "location": {
      "city": null,
      "state": null
    },
    "atsLocation": {
      "city": "Miami",
      "state": "Florida",
      "country": "United States",
      "province": null
    },
    "departmentId": "18630",
    "locationType": "1",
    "jobOpeningName": "Director, Post Breach Recovery/IR",
    "departmentLabel": "Consulting",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": null,
      "state": null,
      "postalCode": null,
      "addressCountry": null
    },
    "datePosted": "2026-03-12",
    "atsLocation": {
      "city": "Miami",
      "state": "Florida",
      "country": "United States",
      "countryId": "1"
    },
    "description": "<p><span style=\"font-weight: bold\">About Us: </span></p>\n<p>CYPFER is a true first-responder Cybersecurity organization enabling clients to return to business rapidly, the right way, following a cyber-attack. We are a global market leader in ransomware post-breach remediation and cyber-attack first response. We deliver results that far surpass market statistics for cyber-extortion and ransomware events. Our team of cybersecurity professionals works with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses.</p>\n<p> </p>\n<p><span style=\"font-weight: bold\">Director, Post Breach Recovery/IR</span></p>\n<p> </p>\n<p>We are looking for an experienced <span style=\"font-weight: bold\">Director, Cybersecurity - Post Breach Recovery/IR </span> to lead complex post-breach remediation and ransomware recovery engagements.</p>\n<p><br>This role requires a <span style=\"font-weight: bold\">technical leader who can guide teams through containment and recovery while also serving as a deep technical resource when complex problems arise.</span> Our consultants regularly rebuild compromised enterprise environments, and this Director will play a key role in both leading engagements and supporting the technical direction of the team.</p>\n<p><br>The ideal candidate brings <span style=\"font-weight: bold\">strong hands-on infrastructure and security experience</span> combined with the ability to lead teams during high-pressure cyber incidents.</p>\n<p><br><span style=\"font-weight: bold\">Key Responsibilities</span></p>\n<ul>\n<li>Lead technical recovery efforts during major cyber incidents</li>\n<li>Direct teams rebuilding compromised infrastructure and identity platforms</li>\n<li>Serve as a senior technical resource for complex recovery challenges</li>\n<li>Guide containment, eradication, and recovery operations</li>\n<li>Help design and execute secure rebuild strategies for enterprise environments</li>\n<li>Communicate clearly with executives, legal teams, and technical stakeholders</li>\n<li>Mentor and support consultants across multiple engagements</li>\n<li>Contribute to the development of recovery playbooks and frameworks<br><br></li>\n</ul>\n<p><span style=\"font-weight: bold\">Required Experience</span><br></p>\n<ul>\n<li><span style=\"font-weight: bold\">8+ years in cybersecurity, incident response, or enterprise infrastructure</span></li>\n<li><span style=\"font-weight: bold\">Strong technical background in enterprise systems and identity architecture</span></li>\n<li>Experience with <span style=\"font-weight: bold\">Active Directory recovery and identity security</span><br></li>\n</ul>\n<ul>\n<li>Hands-on familiarity with <span style=\"font-weight: bold\">EDR, containment strategies, and remediation workflows</span></li>\n<li>Experience leading technical teams during major cyber incident</li>\n<li>Ability to operate both <span style=\"font-weight: bold\">strategically and hands-on when needed</span></li>\n</ul>\n<p><br><span style=\"font-weight: bold\">Preferred Qualifications</span></p>\n<ul>\n<li>Experience leading <span style=\"font-weight: bold\">ransomware or large-scale cyber recovery engagements</span></li>\n<li>Background in consulting or incident response services</li>\n<li>Experience rebuilding <span style=\"font-weight: bold\">enterprise Active Directory or hybrid identity environments</span></li>\n<li>Familiarity with <span style=\"font-weight: bold\">Entra ID, modern identity platforms, and cloud infrastructure</span><br><br></li>\n</ul>\n<p> </p>\n<p>If you thrive in high-stakes environments and want to help organizations rebuild after major cyber incidents, we’d love to hear from you.</p>\n<p><br></p>\n<p> </p>\n<p> </p>\n<p>CYPFER is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.</p>\n<p> </p>\n<p><em>We thank you for your interest in joining the CYPFER team! While we welcome all applicants, only those who are selected for an interview will be contacted.</em></p>\n<p> </p>",
    "compensation": null,
    "departmentId": "18630",
    "locationType": "1",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Director, Post Breach Recovery/IR",
    "departmentLabel": "Consulting",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Experienced",
    "jobOpeningShareUrl": "https://cypfer.bamboohr.com/careers/110",
    "employmentStatusLabel": "Full-Time"
  }
}