Director, Post Breach Recovery/IR
Full-time
US
Oct 25, 2026
RemoteMatch analyzes your experience against this role's specific tech stack, timezone overlap, and requirements.
About the Role
About Us: CYPFER is a true first-responder Cybersecurity organization enabling clients to return to business rapidly, the right way, following a cyber-attack. We are a global market leader in ransomware post-breach remediation and cyber-attack first response. We deliver results that far surpass market statistics for cyber-extortion and ransomware events. Our team of cybersecurity professionals works with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. Director, Post Breach Recovery/IR We are looking for an experienced Director, Cybersecurity - Post Breach Recovery/IR to lead complex post-breach remediation and ransomware recovery engagements. This role requires a technical leader who can guide teams through containment and recovery while also serving as a deep technical resource when complex problems arise. Our consultants regularly rebuild compromised enterprise environments, and this Director will play a key role in both leading engagements and supporting the technical direction of the team. The ideal candidate brings strong hands-on infrastructure and security experience combined with the ability to lead teams during high-pressure cyber incidents. Key Responsibilities Lead technical recovery efforts during major cyber incidents Direct teams rebuilding compromised infrastructure and identity platforms Serve as a senior technical resource for complex recovery challenges Guide containment, eradication, and recovery operations Help design a