> Markdown version of [/jobs/ext/2571863-principal-remediation-specialist](https://www.wearedevelopers.com/jobs/ext/2571863-principal-remediation-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Remediation Specialist - **Company:** Levelblue, LLC - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Domain Controllers, Artificial Intelligence, Amazon Web Services, Amazon S3, Confluence, Microsoft Azure, Cisco PIX, Software as a Service, Cloud Computing, Cloud Engineering, CompTIA Security+, Cyber Security, Computer Networks, Computer Forensics, Data Recovery, Desktop Computing, Digital Forensics, Disaster Recovery, Microsoft Exchange Server, Firmware, Hyper-V, Hypervisor, Identity and Access Management, Internet Security, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Microsoft Software, Network Configuration and Change Management, NetFlow, Remote Access Technology, Cloud Services, Ansible, Microsoft SharePoint, Software Engineering, Technical Data Management Systems, Trusted Systems, Wireshark, Virtual Local Area Networks, VMware VSphere, Forensic Toolkit, Workspace ONE, Sonicwall, Malware, Firewalls (Computer Science), Microsoft InTune, Ethereal, SolarWinds (Software), Windows Security, Casper Suite, Veeam, Terraform, SentinelOne Expertise, Commvault, Cisco, Servicenow, Vmware - **Published:** August 21, 2026 - **Apply:** https://www.careerbuilder.com/job-details/sr-remediation-specialist-air--0f725ffe-3bb3-4c72-8a13-287909fc2134 ## About the Role Due to the varied nature of client systems; as wide and diverse experience across multiple technologies and solutions is preferable. Typical technologies and solutions include: Leadership * More than 10 years in IT / Network / Cloud Engineering roles * Leading enterprise recovery type projects * Disaster Recovery planning * VMware/Hyper-V, AWS/Azure/GCP recovery * IaC - Infrastructure as Code (Terraform, Ansible) Network Recovery SME * Veeam, Commvault, Rubrik, Cohesity Cloud Recovery SME * Cloud/SaaS admin * AWS/Azure Security Engineer Infrastructure & Backup Tools * VMware vSphere, Hyper-V, AWS Backup, Azure Site Recovery * Veeam, Commvault, Rubrik, Cohesity, Zerto * Immutable storage: S3 Object Lock, Wasabi Immutable, Dell Data Domain Network Tools * Firewalls: Palo Alto, Cisco ASA/FTD, SonicWall, Watchguard * Monitoring: SolarWinds, NetFlow analyzers, Wireshark * Segmentation: VLANs, Illumio, Guardicore Endpoint Tools * EDR/XDR: CrowdStrike, Defender ATP, SentinelOne * RMM: Screen Connect, Kaseya, NinjaOne * MDM: Intune, JAMF, Workspace ONE * Imaging: MDT, Clonezilla, Acronis Cloud & SaaS Recovery Tools * AWS/Azure/GCP recovery playbooks * SaaS backup: Spanning, Druva, AvePoint * IAM monitoring: CloudTrail, Azure Sentinel Communication & Coordination Tools * Project Management: Connectwise, AutoTask, Atera * Secure comms: Signal, MS Teams with eDiscovery * Crisis platforms: xMatters, Everbridge * Documentation: Confluence, SharePoint, ServiceNow Testing & Validation Tools * Red/Yellow/Green segmented environments * Sandbox for malware testing: Cuckoo, AnyRun * Cyber range and tabletop testing platforms, * Relevant academic degree * CISM or CISSP (or a commitment to obtain within 12 months) * GCWN, ITIL, DRII Certified * CCNP Security, PCNSE, GCIA * Microsoft 365 Certified, JAMF, Security+ * Veeam Certified, GEBR * CCSP, CCSK Education: * A high school diploma or equivalent is required; a college or university degree is a plus., Amazon Simple Storage Service (S3), Amazon Web Services (AWS), Analysis Skills, Ansible, Artificial Intelligence (AI), Business Support, CCNP - Cisco Certified Network Professional, CCSP - Cisco Certified Security Professional, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cisco ASA (Adaptive Security Appliance), Cloud Computing, CompTIA Security+, Computer Firmware, Computer Forensics, Computer Security, Cryptography, Data Collection, Dell Computers, Dental Insurance, Disaster Recovery, Financial Control, Firewalls, Forensic Science, GCIA - GIAC Certified Intrusion Analyst, GCP (Good Clinical Practices), GCWN - GIAC Certified Windows Security Administrator, Human Intelligence (HUMINT), Hypervisors, Identify Issues, Incident Response, Insurance, Internet Security, Leadership, Malware, Manufacturing Data Management, Microsoft Exchange Server, Microsoft Hyper-V, Microsoft Product Family, Microsoft Windows Azure, Netflow, Network Configuration Management, Project/Program Management, Proposal Development, Protective Services, RMON, Remote Access, Sales, Security Monitoring, Software Engineering, Software as a Service (SaaS), SonicWALL, Statement of Work (SOW), Test Tools, Training/Teaching, VLAN (Virtual Local Area Network), VMWare, VMWare vSphere, VPN (Virtual Private Network), Validation Testing, Vision Plan, Wireshark (Ethereal) ## Description The Principal Remediation Specialist is a senior level position with the scope to develop and grow the restoration capability within the AIR practice. The primary goal of each engagement is to recover our clients to an operating capacity post incident. Key Attributes: Business Support * Support the development of bids / proposals associated with the opportunities identified usually from our Digital Forensics and Incident Response practice. * Work clients and our sales teams with the generation of SOWs. Data Collection / Set-up * Deployment of client-side data and log collection solutions * Assist with forensic collection requests * Install Remote Monitoring and Management ("RMM") utility and/or establish VPN credentials for remote access * Deployment of Forensic tools e.g. (SentinelOne / Velociraptor) * Develop shared inventory tracking document Threat Actor Removal * Technical engineering efforts to remove the threat actors * Acquire third party products and services necessary to remove the threat actors and rebuild, recover, stabilize, and secure the Customer systems and environments * Block IOCs within network firewalls as provided by forensics provider * Perform impact assessment of servers to determine viability in cooperation with forensics provider Environment Re-Build * Rebuild, recover, stabilize, and secure systems * Restoration/ rebuild/ decryption of servers * AD Health review and rebuild * Domain controller rebuilds and AD hardening * Configure segregated networks * Hypervisor configurations * LAPS (Local Administrator Password Solution) configuration * Troubleshooting, impact to and recovery options for Exchange * Remote site Firewall Firmware update assistance Legal / Comms * Work with Company, Customer's General Counsel, Customer's insurance carrier, and any applicable third parties ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)