Senior Consultant - Cyber Resilience
AHEADAbout the role
AHEAD is seeking a Senior Consultant to help clients anticipate, withstand, recover from, and evolve beyond cyber incidents. This role will lead advisory and delivery work focused on incident recovery, cyber disaster recovery, response and recovery maturation, and post-incident resilience improvement.
The successful candidate will help organizations translate lessons from incidents, exercises, and threat exposure into practical improvements to recovery strategies, operating models, playbooks, architectures, governance, and testing programs. The role will also connect recovery planning to anticipation capabilities through purple-team-style validation: using realistic attack paths, threat hunting, exposure reconnaissance, and assume-breach scenarios to test whether exposure reduction, detection, response, and recovery controls work together.
This is a client-facing consulting role requiring strong technical judgment, executive communication, and the ability to move from strategy to implementation. The consultant should be comfortable working across security, infrastructure, cloud, applications, business continuity, risk, and crisis-management stakeholders.
Responsibilities
-
Assess and mature incident response, cyber resilience, and threat intelligence capabilities.
-
Design or improve recovery operating models based on threat hunting scenarios, roles and responsibilities, escalation paths, and decision rights.
-
Develop and refine cyber recovery plans, recovery runbooks, crisis playbooks, and communications procedures.
-
Facilitate post-incident reviews, after-action reviews, and lessons-learned sessions that produce measurable improvements.
-
Create and conduct tabletop exercises, cyber recovery simulations, and technical recovery exercises.
-
Evaluate recovery dependencies across identity, networking, endpoints, applications, data, cloud platforms, backup infrastructure, and third parties.
-
Assess backup and restore strategies, including isolation, immutability, recoverability, privileged-access controls, and validation testing.
-
Help clients define critical attack paths, pertinent threat intelligence sources, and conduct exposure reconnaissance.
-
Create practical roadmaps to mature anticipation and recovery capabilities over time based on proven organizational threats.
-
Support implementation of prioritized improvements, coordinating with client tec
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s