Restoration and Recovery Lead

RESTORATION & RECOVERY LEAD, Kuala Lumpur  

S-RM is a global intelligence and cyber security consultancy.  Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.   

We’ve been able to do this because of our outstanding people.  We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.   

But we also know that work isn’t everything. It’s about the lives and careers it helps us build.  We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day. 

We’re excited you’re thinking about joining us. 

WORKING IN CYBER AT S-RM 

Our Cyber Security division is the fastest-growing part of S-RM.  The cyber sector is always evolving, and our Advisory, Ethical Hacking, and Incident Response practices are in more demand than ever.  

We’re building a team to meet this challenge.  We’re quick to respond, innovate, and improve.  We don’t get too hung up on hierarchy or bureaucracy.  If your ideas are good enough, we’ll empower you to implement them.  If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back. 

We also don’t believe there’s a typical cyber security professional.  We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more.  You’ll always find a range of perspectives and expertise to help you learn and grow.  

If that sounds like your kind of team, we’d like to hear from you. 

ROLE DESCRIPTION 

We are looking for talented consultants to join the Restoration & Recovery team within our growing Incident Response practice.  

You will work across the full lifecycle of security incidents, primarily ransomware, to help our clients respond and recover. S-RM’s Incident Response team operates a global delivery model, so you will supporting incidents across multiple geographies, with a focus on Europe and North America. 

Key responsibilities include: 

• Developing restoration strategies during Incident Response cases: working alongside your colleagues in the Incident Response team, you will develop bespoke restoration strategies during live incidents, focusing on ensuring security and capability is maintained. 

• Executing these strategies to help clients restore their operations quickly and securely: in partnership with client’s IT and security teams, you will lead on the execution of these strategies, restoring clients to operations in a quick and secure manner. 

• Leading and developing relationships with supporting restoration partners: in cases where we need to surge additional resources through our partners, you will manage these relationships and direct the work of our partners to ensure S-RM’s standards are met. 

• Capability development: you will contribute to the development of S-RM’s restoration and recovery capability, creating playbooks and providing training for the broader Incident Response team to ensure effective collaboration during cases.  


• On-site Restoration Support: in some cases, it may be beneficial to support clients locally at their data centres or office locations. You may be expected to attend their sites during the early stages of restoration to help support these efforts.  

Due to the global nature of S-RM’s Incident Response team, this role requires working in shifts. The shift pattern will be finalised once all hires for this role have been made. However, in the interests of transparency, we expect the shift pattern will ensure coverage of core US working hours (Eastern Time) as well as weekends. Responsibility for unsociable shifts will be shared across the team. 

Other features of the role include: 

• Variety of casework: no day will be the same.  Our team responds to a huge variety of incidents for both public and corporate clients. 

• Developing an understanding of Incident Response: you will have opportunities to broaden your security awareness into the wider incident response process, learning how restoration fits into the bigger picture of a response. 

• Flexible working practices: responding to incidents can be intense, high-pressure work.  We are mindful of our team’s work/life balance and offer flexible working options to support your wellbeing. 

WHAT WE’RE LOOKING FOR 

We are seeking candidates with diverse levels of experience and expertise in IT Engineering, System Administration or Cyber Security to join our Restoration & Recovery team. 

Candidates with the following qualifications and experience are likely to succeed as consultants within our Restoration & Recovery team. That said, if you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box - we’re looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others. 

We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives. 

We’re looking for candidates with: 

• In-depth knowledge of on-premise, virtualised (ESXi / Hypervisor Technology) and Cloud-hosted (AWS/Azure/GCP) configuration and implementation 

• In-depth knowledge of Active Directory functions, implementation, and configuration, including integrations with Entra ID functionality. 

• Comprehensive understanding of standard backup solution practices, restoration of data and preparing systems for introduction into production environments. 

• Comprehensive understanding of general network appliance integration and configuration as well as security and network-based tooling implementations. 

Relevant industry certifications are not required for this role. However, holding any of the following is beneficial: Microsoft Certified Systems Administrator (MCSA), Virtualised Environment Courses & Certifications (vCentre/vSphere), Network Administration Qualifications/Certifications. 

The successful candidate must have permission to work in Kuala Lumpur by the start of their employment. 

OUR BENEFITS 

We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, including: 

• 20 days paid holiday each year: in addition to public holidays, as well as 1 additional day of leave for every year you work at S-RM up to a maximum of 5 days. 

• Flexible working: work a minimum of two days a week in the office and the remainder remotely, choose your hours between 7am and 7pm. 

• Pension scheme: S-RM contributes to Employees Provident Fund (EPF) in accordance with legislative requirements. 

• Life Insurance: help someone you love should something happen to you.  

• Company-paid private medical and dental insurance.  

• Company-paid maternity, paternity and fertility treatment leave. 

• Employee Assistance Programme: free access to specialist support services, including counselling, as well as an online portal of useful articles, tips and tools. Available 24/7, 365 days a year. 

The role will be based in our office in Kuala Lumpur. However, we have flexible working arrangements available. 

THE APPLICATION PROCESS 

We want to get to know you, and for you to get to know us, to see if we’d be a good fit.  We are responsive and respectful of people’s time throughout our hiring process. 

A typical application process includes: 

1. Initial screening of your application by our recruiting team.


2. An interview to assess your baseline technical skills.


3. An interview to discuss your previous experience, broader competencies, and suitability for the role. 

Please apply for this role via:  Job Application for Restoration and Recovery Lead at S-RM