Senior Cybersecurity Technical Writer Jobs in Raleigh, NC

Senior IT Infrastructure & Cybersecurity Consultant (Traveling Contractor)

Position Overview

We are seeking a highly skilled Senior IT Infrastructure & Cybersecurity Incident Remediation Consultant to provide on-demand onsite and remote support for clients across the United States. This contractor position requires a versatile IT professional with deep expertise in cybersecurity remediation, server engineering/administration, network engineering, incident response, and digital forensics.

As client requests arise, the consultant will travel to customer locations throughout the 48 contiguous states to remediate infected clients. The ability to quickly contain, isolate and remediate the infected network will be required. After that part is done, you will need to rebuild secure and restore critical IT environments. Typical assignments range from one to two weeks and will include cybersecurity incidents, infrastructure failures, backup restorations, remediation efforts, vulnerability management, disaster recovery efforts, and system migrations.

This role is ideal for an experienced professional who can remain calm during crises, independently manage complex technical challenges, preserve forensic evidence during the process, and securely rebuild compromised systems and networks.

Key Responsibilities

Cybersecurity Incident Response & Remediation

• Respond to active cybersecurity incidents and infrastructure compromises.
• Assess affected environments and develop remediation plans.
• Securely rebuild compromised systems without destroying critical forensic evidence.
• Perform vulnerability assessments and remediation activities using tools such as:
• • Nessus
  • Qualys
  • Microsoft security tools
• Deploy security patches, CVE remediation, and system-hardening standards.
• Conduct threat hunting activities to identify Indicators of Compromise (IoCs) and Indicators of Attack (IoAs).
• Investigate suspicious activity and validate containment efforts.

Support security recovery and post-incident restoration efforts.

Infrastructure & Systems Administration

• Rebuild enterprise servers, ESX hosts, virtualization restoration, and network environments.
• Build, configure, deploy, and support Windows servers from the ground up and/or from backups
• Administer and support:
• • Domain Controllers
  • VMware hosts and virtual environments
  • VMs, data stores, snapshots, and VMDKs
  • Active Directory
  • File Servers
  • Group Policy
  • DNS
  • DHCP
  • Microsoft Hyper-V
• Perform routine preventative maintenance and infrastructure upgrades.
• Execute backup, recovery, and disaster recovery procedures.
• Create and maintain technical documentation, diagrams, procedures, and daily updates to system progress.

Network Engineering & Security

• Configure, manage, and support firewalls from multiple vendors, including Fortinet, SonicWall and Cisco.
• Troubleshoot and resolve complex network and system issues.
• Implement network security controls and system hardening measures.
• Administer and troubleshoot:
• • TCP/IP networking
  • VLANs
  • Routing and switching
  • Subnetting
  • Enterprise connectivity issues
• Continuously monitor infrastructure for performance and security concerns.

Digital Forensics & Evidence Preservation

• Preserve digital evidence while supporting incident response activities.
• Capture and analyze volatile system data, including memory and active process information.
• Conduct live forensic triage of compromised systems.
• Perform bit-stream imaging and forensic evidence collection using tools such as:
• • FTK Imager
  • EnCase
  • Windows Live Response
  • Open-source forensic utilities
• Analyze event logs, network traffic, and forensic artifacts.
• Review:
• • Windows Event Logs
  • System logs
  • Security logs
  • Wireshark packet captures
• Maintain chain of custody and confidentiality requirements throughout investigations.

Root Cause Analysis & Crisis Management

• Lead technical response efforts during high-pressure incidents and critical outages.
• Analyze and identify root causes of security incidents, infrastructure failures, and system disruptions.
• Maintain operational effectiveness during emergency response situations.
• Develop corrective action plans to prevent recurring issues.
• Communicate findings and recommendations to technical and non-technical stakeholders.

Client & Project Support

• Travel to client locations nationwide on short notice.
• Work independently or collaboratively with internal and client teams.
• Manage multiple projects and competing priorities.
• Maintain professionalism, confidentiality, and adherence to project scope requirements.
• Provide exceptional customer service and technical leadership during onsite engagements.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 3-5 years of experience in:
• • Cybersecurity Remediation (3+ years)
  • Incident Response (3+ years)
  • Systems Administration (10+ years)
  • Network Administration (10+ years)
  • Infrastructure Engineering (10+ years)
• Experience building and configuring servers from scratch.
• Hands-on experience with:
• • Active Directory
  • Group Policy
  • DNS
  • DHCP
  • Windows Server
  • VMware
  • Hyper-V
• Strong knowledge of:
• • TCP/IP
  • VLANs
  • Subnetting
  • Enterprise networking
• Experience administering Fortinet, Cisco, SonicWall, or similar firewall platforms.
• Familiarity with forensic collection methodologies and incident response processes.
• Ability to analyze logs, packet captures, and system artifacts for investigative purposes.
• Strong troubleshooting, analytical, and critical-thinking abilities.
• Ability to work independently with minimal supervision.
• Excellent documentation and communication skills.
• Ability to travel extensively and respond to client requests within 24 hours.
• Ability to work flexible schedules, including evenings, weekends, and emergency response situations as needed.

Preferred Qualifications

• Microsoft Certifications (MCSA, MCSE, Azure Administrator, Azure Security)
• VMware Certified Professional (VCP)
• Cisco Certifications (CCNA, CCNP)
• Security Certifications such as:
• • Security+
  • Network+
  • CySA+
  • CISSP
  • CISM
  • CASP+
  • GCIH
  • GCFA
  • GCFE
• PMP Certification
• Experience with:
• • Digital Forensics
  • Threat Hunting
  • Security Operations
  • Data Center Migrations
  • Physical Incident Response
• Previous consulting or professional services experience.

Ideal Candidate:

The ideal candidate is a highly adaptable infrastructure and cybersecurity professional who excels under pressure, can travel on short notice, has strong forensic and incident response capabilities, and possesses the technical expertise to remediate, secure, rebuild, and support complex enterprise environments across diverse client organizations. Great customer service skills are required to maintain a calm and professional atmosphere during these stressful times for our clients.

The Plexos Group, LLC employs the most experienced and innovative professionals in the field of disaster recovery management who have completed similar work for municipal, state, and federal agencies. Our project team has more than 100 years of combined experience in managing disaster recovery and has led disaster recovery programs in excess of $25 billion.