Senior Incident Recovery Architect

Trustwave; United States; Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

401(k) with employer matching

Paid time off and holidays

Flexible spending accounts and health

Employee assistance programs

Training and development opportunities

Adoption assistance program

Job summary

LevelBlue seeks a Principal Remediation Specialist to lead restoration after security incidents. You will grow the AIR practice, recover client environments to operational capacity, and work with sales on bids and SOWs. Responsibilities include data collection deployment, forensics support, and rebuilding critical systems with secure configurations.

The role emphasizes cross-functional collaboration, advanced threat containment, and post-incident resilience across on-prem and cloud platforms.

Qualifications

• Wide and diverse experience across multiple technologies and solutions.
• Leadership in enterprise recovery projects and disaster recovery planning.
• Experience with VMware/Hyper-V and cloud recovery across AWS/Azure/GCP.

Responsibilities

• Develop and grow restoration capability within AIR practice.
• Recover clients to operating capacity post incident.
• Collaborate with sales teams on bid/proposal development and SOW generation.
• Deploy client-side data collection solutions and assist with forensic requests.
• Rebuild, recover, and secure customer environments, including AD health and domain controller rebuilds.

Skills

Leadership

IT/Network

Security tooling

Disaster Recovery

Cloud recovery

Incident response

Education

Relevant academic degree

CISM/CISSP (or plan to obtain within 12 months)

GCWN, ITIL

Tools

VMware

Hyper-V

SentinelOne

Veeam

Cohesity

Rubrik

Palo Alto

Cisco ASA/FTD

SonicWall

Wireshark

Job description

LevelBlue seeks a Principal Remediation Specialist to lead restoration after security incidents. You will grow the AIR practice, recover client environments to operational capacity, and work with sales on bids and SOWs. Responsibilities include data collection deployment, forensics support, and rebuilding critical systems with secure configurations.

The role emphasizes cross-functional collaboration, advanced threat containment, and post-incident resilience across on-prem and cloud platforms.