Senior Restoration Engineer, DFIR
- Remote, United States
- Full-time
- Senior
- Posted 6 days ago
or apply from Claude / ChatGPT / Muse
Senior Restoration Engineer, DFIR is a full-time remote role in the United States at a cyber incident response services team.
About the role
Fits an infrastructure engineer who stays calm while a client's environment is down and evidence must be preserved. Restoration runs alongside forensics, so recovery decisions have to hold up under pressure.
At a glance
- Pay
- Not stated in the posting
- Remote scope
- Remote, United States
- Seniority
- Senior
- Employment
- Full-time
- Skills
- Windows Server, Active Directory, Microsoft 365, Entra ID, DNS, DHCP, EDR
- Posted
- 29 Oct 2026
- Last checked
- 3 Nov 2026
What you will do
- Lead the restoration workstream from first assessment through return to normal operations
- Size up the client's environment, critical services, backups, identity systems and network dependencies to set priorities
- Build and keep a restoration plan with dependencies, owners, milestones, risks and validation steps
- Rebuild Windows servers, endpoints, Active Directory, virtualisation and core network services
What they look for
- Hands-on technical leadership on incident response engagements under real-time pressure
- Depth in Windows, Active Directory, virtualisation, DNS, DHCP, VPN, firewalls and backup platforms
- Experience recovering Microsoft 365 and Entra ID, file services and business-critical applications
- Ability to validate backups, run test restores and confirm security controls before systems go back online
How Keywordise applies for you
Alex Demo
[email protected]
From your CV
Yes, fully remote
- Sent
- 09:41
- Attached
- Your tailored CV
- 1Upload your CVAdd your CV once. It takes about a minute.
- 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
- 3The form fills itselfName, email, experience and screening questions, field by field.
- 4Application sentYou get a receipt and follow it in your dashboard.
Apply with Keywordise AI7-day free trial, no card.
Apply from your AI assistant
Connect Keywordise to your assistant once, then send it the prompt. It applies for you.
Claude
- In Claude, open Settings, then Connectors, and choose Add custom connector.
- Name it Keywordise and paste the connector URL.
- Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
ChatGPT
- In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
- Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
- Log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
Muse
- Open Muse (muse.ai or the app) and send it the message below.
- If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
- Send the prompt. Muse asks before it sends anything.
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.Muse is available in the US only for now.
Apply to Keywordise job smwa56ipghQuestions about this job
Is this job fully remote, and from where?
Yes, it is listed as remote, aimed at candidates in the United States.
What does this job pay?
The posting does not state a salary, so there is no figure to quote.
What experience is needed?
It is a senior role. The posting asks for: hands-on technical leadership on incident response engagements under real-time pressure; depth in Windows, Active Directory, virtualisation, DNS, DHCP, VPN, firewalls and backup platforms; experience recovering Microsoft 365 and Entra ID, file services and business-critical applications. Skills it names include Windows Server, Active Directory, Microsoft 365, Entra ID.
How do I apply with Keywordise AI?
Click Apply with Keywordise AI, create an account and upload your CV. Your CV and cover letter are written for this job from what you have really done, then Keywordise applies for you. Trial: 7 days, no card.
More remote engineering jobs
- A managed IT services providerSenior Windows Engineer - Managed Services
- Remote, United States
- CCorpaySenior Microsoft Engineer
- Remote, India
- VValtechIT Engineer, Operations
- Remote, Europe
- MRMGM ResortsIdentity Governance Engineer
- USD 68,500 to 91,400 per year
- Remote, United States
- A managed detection and response security providerService Reliability Engineer
- Remote, worldwide
- LLLLNLVirtual Desktop Engineer / Desktop Engineer
- USD 125,310 to 153,444 per year
- Remote, United States