MOXFIVE is cybersecurity company helping organizations respond to incidents and minimize the risk of future attacks.  Over the last decade, our team of experts has helped thousands of businesses respond to major incidents and saw firsthand that there needed to be a better way for organizations to get the technical expertise they need when they need it most.  Through a combination of our technical experts and proprietary platform, we bring order to chaos and deliver a tailored incident response approach and resilience-minded path forward for clients of all sizes, faster and more efficiently.

MOXFIVE

Bonus

MOXFIVE is building technologies that leverage AI to streamline response, recovery, and resilience from cyber attacks in enterprises. We are looking for a Senior Platform Engineer to join our engineering team, where your work will directly shape the reliability, security, and deployability of our platform.

The MOXFIVE founding team brings over 30 years of combined cybersecurity experience from leading companies such as CrowdStrike, Mandiant, Palo Alto Networks, Crypsis, Illumio, and Expel. Today, we are focused on seizing an opportunity with the potential to disrupt the breach response market.

As a senior platform engineer you like building the foundations that help product teams ship quickly, safely, and with confidence. You are comfortable owning cloud infrastructure, Kubernetes workloads, CI/CD pipelines, secrets management, deployment controls, observability, and production runbooks.

The practical side of platform engineering is where you do some of your best work: making releases predictable, failures easier to diagnose, local development smoother, and production access secure without creating unnecessary friction.

Security and reliability matter deeply to you, but you bring judgment rather than rigidity. You know when to automate, when to document, when to add guardrails, and when to keep a path manual because the blast radius deserves care.

High-velocity teams energize you. You are comfortable moving quickly, making sound decisions with imperfect information, and strengthening systems as the product and engineering organization grow..

At MOXFIVE, reliability is not just an engineering concern. It is part of the trust customers place in us during high-pressure cyber incidents. When decisions are being made quickly, our systems need to be secure, dependable, understandable, and ready.

As our Senior Platform Engineer, your work will strengthen the path from code to production: improving delivery, hardening infrastructure, clarifying operational signals, and reducing the friction that slows teams down when speed matters. You will help engineers release with confidence and give response teams better visibility into the systems they depend on.

This is a high-leverage role for someone who combines technical depth, security judgment, and a bias toward execution. The platforms, controls, and practices you build will shape how MOXFIVE develops, releases, observes, and protects software used by enterprises responding to cyber incidents.

Own and improve the platform foundation that helps a high-velocity engineering team ship safely across cloud infrastructure, Kubernetes, IaC, secrets, networking, access controls, CI/CD, observability, and production guardrails.

Build internal tooling for an AI-enabled engineering workflow, including automation, repo and CI feedback loops, agent-ready development environments, and safeguards that let engineers move quickly without weakening production discipline.

Strengthen operational readiness through better logging, metrics, tracing, alerting, runbooks, and incident follow-up.

Harden production access with least-privilege IAM, secure secret management, auditability, and controlled break-glass paths.

Set pragmatic platform standards that help a small team move quickly today while avoiding infrastructure, reliability, and security debt tomorrow.

5+ years of experience in platform engineering, DevOps, SRE, infrastructure engineering, or backend-adjacent cloud operations.

A track record of owning production systems where reliability, security, and developer velocity all matter.

Hands-on experience with cloud infrastructure, Kubernetes, infrastructure-as-code, CI/CD, secrets management, access controls, and observability.

Experience building internal developer tooling, platform automation, or AI-assisted development workflows.

Comfort designing safe release processes with deployment gates, smoke tests, rollback paths, and clear ownership.

Practical experience supporting relational databases and production data changes.

A security-minded approach to infrastructure, including least privilege, auditability, secret handling, and controlled production access.

Clear written communication for runbooks, deployment notes, incident follow-ups, and engineering decisions.

We care more about strong platform judgment than exact tool overlap. Our environment includes technologies in these categories:

Cloud and Kubernetes: AWS or comparable cloud platforms, managed Kubernetes, container registries, IAM, private networking, and secure cluster access.

Infrastructure: Terraform, OpenTofu, Terragrunt, or similar infrastructure-as-code and environment orchestration patterns.

CI/CD: GitHub Actions or similar CI/CD systems, protected environments, federated identity, deploy gates, image pipelines, and smoke-test automation.

Runtime Operations: API services, worker services, durable workflow/orchestration systems, event streaming, and relational databases.

Security and Access: Least-privilege IAM, service tokens, secret rotation, zero-trust access patterns, production approval gates, and audit-friendly operational controls.

Observability: APM, logs, metrics, tracing, alerting, Kubernetes visibility, and cloud integrations using tools such as Datadog, Honeycomb, Grafana, New Relic, or similar.

Developer Experience: Docker, local Kubernetes, kubectl, task runners, local service scripts, and frontend build/deploy workflows.

Familiarity with agent harness design, agent sandboxing, including tool access, environment setup, state management, permissions, and production guardrails.

Experience managing production model inference across hosted providers such as Together AI or 

, GPU platforms such as RunPod or Lambda Cloud, Modal, or similar, or self-hosted serving stacks, including the tradeoffs between hosted APIs, dedicated deployments, serverless GPUs, and self-hosted inference stacks.

Senior Level

MOXFIVE is seeking a Senior Platform Engineer to build and optimize the foundational cloud infrastructure and developer workflows. You will own Kubernetes workloads, CI/CD pipelines, and observability using tools like AWS, Terraform, and GitHub Actions to ensure high reliability and security for their AI-driven cyber resilience platform.

Senior Platform Engineer

Full Time

You've been in the war room. You know what it feels like when hundreds of servers are down, the C-suite is watching, legal and insurance are on the line, and the clock is running. And you know how to lead through it.

You don't just manage projects, you command recoveries. When a large-scale ransomware incident hits an enterprise environment, you're the one building the master plan, sequencing the workstreams, and making the real-time calls that keep everything moving in the right direction. You translate "lateral movement on these hosts" into a prioritized restoration roadmap before the next executive briefing, and you do it without breaking a sweat.

You're as comfortable challenging a technical assumption with a forensics team as you are delivering a strategic update to a CEO. You've learned that at this level, the work doesn't fit in with a nine-to-five, and you stopped expecting it to a long time ago. You're wired for high stakes, and the complexity that overwhelms others is exactly where you thrive.

You'll be joining MOXFIVE as a Senior Technical Project Manager, leading restoration efforts for the largest, most complex cybersecurity incidents we handle. 

These aren't straightforward engagements. We're talking about hundreds of impacted systems, intricate application dependencies, multiple concurrent workstreams, and organizations whose futures can hinge on how fast and how well they recover. The clients in these situations don't just need someone to track tasks, they need a leader who can think strategically, communicate with authority, and drive alignment when everything is moving at once.

That's you. Your ability to bring order to enterprise-scale chaos isn't just operationally important - it's the difference between a recovery that holds and one that unravels.

Lead end-to-end restoration project management for large-scale enterprise incidents involving hundreds of systems and complex dependencies

Serve as the strategic point of contact for C-suite executives, legal counsel, insurance carriers, and technical partners throughout critical engagements

Build and maintain comprehensive restoration roadmaps, master server trackers, dependency maps, and executive dashboards that give every stakeholder a clear picture

Independently analyze server tiering, application dependencies, and restoration sequencing to drive smart priority decisions - not just document them

Coordinate across multiple concurrent workstreams: technical teams, forensics investigators, clients, legal counsel, and external partners

Make real-time calls on resource allocation, priority shifts, and approach changes as incident conditions evolve

Lead war room discussions and executive briefings with clarity, confidence, and realistic timelines

Challenge technical assumptions when the situation calls for it and drive alignment across stakeholder groups with competing priorities

Mentor Technical and Incident Project Managers, and contribute to MOXFIVE's restoration methodology and process development

Participate in a rotating on-call schedule with extended availability during assigned critical incidents

6+ years of project management experience leading highly complex technical or cybersecurity projects, with a proven ability to independently manage multiple concurrent workstreams

A deep technical foundation. Substantial understanding of IT infrastructure, server dependencies, and application architecture that lets you make strategic decisions, not just relay them

Exceptional organizational skills, with experience designing comprehensive trackers, dependency maps, and dashboards for enterprise-scale recovery operations

Advanced stakeholder management abilities, with a track record of coordinating and influencing C-suite executives, legal counsel, insurance carriers, and technical partners under pressure

Strategic decision-making in high-stakes environments. Comfortable making real-time priority calls with incomplete information

Executive-level communication skills. You translate complex technical realities into business impact for the boardroom and clear direction for the technical team

Proven crisis leadership. Extended hours during active incidents, composure under extreme pressure, and the ability to adapt when the plan changes

Strong leadership presence that earns respect without requiring authority, and keeps teams focused and motivated through recovery operations that can span weeks

Experience managing enterprise-scale incidents involving hundreds of systems and coordination across multiple technical and business workstreams

Bachelor's degree in business, computer science, engineering, information technology, or a related field. Or the equivalent in hard-won experience

Hands-on background in IT roles - systems administration, network engineering, or security operations

PMP, PgMP, or advanced project management certification

Advanced security certifications such as CISSP, GCIH, CISM, or GIAC

Experience leading incident response across Fortune 500 or large enterprise organizations

A history of developing and implementing IR playbooks and methodologies

10+ years in consulting or professional services with a focus on crisis management

Previous people management or team leadership experience

Education

On-call rotation

Stakeholder Management

MOXFIVE is seeking a Senior Technical Project Manager to lead restoration efforts for large-scale enterprise cybersecurity incidents. The role involves managing complex ransomware recoveries, coordinating between C-suite executives and technical teams, and developing detailed restoration roadmaps and dependency maps to ensure business continuity.

Sr. Technical Project Manager

You're the technical lifeline when everything goes dark. When ransomware brings a company to its knees at 2 AM, you know exactly which systems to prioritize, which backups are viable, and how to orchestrate recovery efforts to get critical business operations back online. Complex IT systems don’t intimidate you, they're puzzles you've spent 10+ years learning to solve under pressure.

You don't just know Active Directory; you've rebuilt it from scratch in production more times than you'd like to admit. You can architect hybrid cloud environments in your sleep, and you've navigated VMware, Azure, AWS, and on-premises infrastructure so many times that you know where the bottlenecks will be before they appear. You speak fluent backup and disaster recovery, no matter the backup solution.

You're equally comfortable in the trenches with sysadmins troubleshooting server or container infrastructures as you are explaining timelines to a CIO who needs to know when their business will be operational again. 

You've built your career around keeping businesses running or bringing them back from the brink. You know that infrastructure restoration isn't a nine-to-five job; it's about being available when organizations need you most, working through the night if that's what it takes, and having the endurance to see a recovery through initial triage to full operational restoration. You thrive in chaos, you care obsessively about dependencies and sequencing, and you wouldn't trade this work for anything.

You'll be joining MOXFIVE as Senior Restoration Engineer, serving as a critical technical first responder within our Incident Response practice. When ransomware, destructive malware, or catastrophic system failures cripple an organization's infrastructure, you'll be the expert leading the technical restoration effort from the ground up.

In this role, you'll assess the scope of infrastructure damage, determine what can be recovered versus what must be rebuilt, orchestrate complex restoration sequences across hybrid and cloud environments, and make real-time technical decisions that directly determine how quickly a business can resume operations. You'll work alongside forensics teams, security analysts, legal counsel, insurance carriers and client leadership to ensure recovery efforts don't reintroduce threats while moving as quickly as possible.

When a company's entire infrastructure is down, they don't just need someone who knows technology, they need someone who's done this before, who understands the critical path to recovery, and who can work under extreme pressure without cutting corners. Your technical expertise and restoration experience directly determine whether a company recovers in days versus weeks, and whether they emerge with a more resilient infrastructure or simply limp back to a vulnerable state.

10+ years of hands-on infrastructure experience building, managing, and restoring complex enterprise environments across private, hybrid, and cloud architectures (Azure, AWS, GCP, on-premises).

Deep expertise in disaster recovery and business continuity, including backup technologies (Veeam, Commvault, Rubrik, etc.) and storage level snapshots, restoration methodologies, and recovery orchestration across interdependent systems.

Proven incident response experience leading infrastructure restoration efforts during ransomware attacks, destructive malware events, or major system failures with demonstrated ability to work under extreme time pressure.

Advanced knowledge of core infrastructure technologies including Active Directory, DNS, virtualization platforms (VMware, Hyper-V), storage systems, networking, and identity management systems.

Leadership and coordination experience directing and guiding contractors, MSPs, internal IT teams, and third-party engineers through complex restoration plans, ensuring everyone understands their role, dependencies, and execution timelines while maintaining quality and security standards.

Deep understanding of application architecture and dependencies, including how multi-tier applications work together (web servers, application servers, API servers, database servers, load balancers) and the ability to identify critical dependencies during restoration planning.

Strong problem-solving and triage capabilities, able to rapidly assess damaged environments, identify critical dependencies, determine restoration priorities, and develop executable recovery plans in real-time.

Excellent communication skills, capable of translating complex technical recovery details into clear status updates for executives, stakeholders, and cross-functional teams during high-stress situations.

Collaborative mindset, comfortable working alongside forensics teams, security analysts, technical staff, and leadership while maintaining focus on rapid, secure restoration.

All official MOXFIVE communications will only come from an @

Experience

MOXFIVE is seeking a Senior Restoration Engineer to serve as a technical first responder during critical infrastructure failures and ransomware attacks. You will lead complex restoration efforts across hybrid and cloud environments, including Azure and AWS, to ensure rapid business recovery and operational continuity.

Senior Restoration Engineer

You’re the first person people call in a emergency. You see beyond the initial crisis transforming cybersecurity incidents into opportunities for meaningful action. Complex scenarios energize you, and your superpower is simplifying technical intricacies into clear strategies that everyone, from IT teams to Fortune 1000 executives, can understand and trust.

You don't think mimikatz is the name of a Pokémon and you have to restrain yourself every time someone uses EST during EDT. You've been there, you've done that, and boy, you've got some stories to tell. You're welcomed in the boardroom as well as the server room and can code switch as well as you context switch. You read the room, then own the room, and make everyone involved glad you did.

You’ve built a career around navigating critical cybersecurity challenges, confidently leading teams through uncertainty toward solutions and long-term resilience. You lean into problems, care about getting "the little things" right, and know that it doesn't fit into a nine-to-five schedule. You know it's a lifestyle and have accepted it's the way you're wired and you wouldn't want to do anything else.

You’ll be joining MOXFIVE as a Technical Advisor, taking on a frontline leadership role within our Incident Response practice. Whether it’s responding to ransomware attacks or defending against sophisticated nation-state threats, you’ll drive coordination strategies and manage complex cases across both enterprise and SMB environments.

In this role, you’ll provide critical guidance in high‑pressure situations turning your expertise into clear, actionable insights that executives can rely on. As a trusted advisor, you’ll help organizations not only navigate crises but also uncover opportunities to strengthen their defenses and build resilience for the future.

When ransomware strikes, organizations don't just need technical support—they need strategic clarity. Your prescriptive guidance directly shapes the outcome, ensuring companies not only recover swiftly but also emerge stronger, wiser, and better protected.

Proven consulting experience managing and responding to cybersecurity incidents, especially ransomware, with clarity, confidence, and strategic vision.

Exceptional ability to communicate complex technical issues clearly and effectively, particularly to executives and stakeholders.

Experience working engagements and building relationships with cyber insurance carrier and privacy counsel partners

Strong leadership capabilities, inspiring confidence and ensuring alignment during critical engagements.

Strategic thinking with a proactive approach anticipating challenges and providing solutions that reinforce long-term security and resilience.

A collaborative mindset, comfortable working closely with internal teams, partners, and high-level stakeholders.

MOXFIVE is hiring a Technical Advisor to lead its Incident Response practice. The role focuses on managing complex cybersecurity incidents, including ransomware and nation-state threats, while providing strategic guidance to Fortune 1000 executives. Key responsibilities include driving coordination strategies and building resilience for enterprise and SMB environments.

Technical Advisor

You are the person who makes chaos look manageable. When a cyberattack hits and five workstreams are spinning at once, you're the one holding the center, tracking every moving part, keeping every stakeholder informed, and making sure nothing falls through the cracks.

You don't need to speak fluent threat actor, but you know exactly what needs to happen next and who needs to know about it. You speak with clients just as fluently as you speak with the technical team. You know the difference between a status update that actually helps and one that just creates more questions. You've managed projects under pressure before, and you've learned that in high-stakes environments, precision and calm are superpowers.

You're wired for complexity. Juggling 5–8 concurrent engagements doesn't overwhelm you, it's where you do your best work. You care about the details that others overlook, because you know those details are what keep a response on track and a client's trust intact.

You'll be joining MOXFIVE as a Project Manager supporting our Incident Response practice - the operational backbone that keeps our engagements running when organizations need us most.

When ransomware strikes, the technical work is only part of the story. Forensics, restoration, remediation, legal documentation, client communications all must move simultaneously, and someone has to orchestrate it all. That's you. You're the reason our technical teams can stay focused on the response itself, our clients stay informed without feeling lost, and our engagements close with the precision and professionalism MOXFIVE is known for. 

Your work doesn't just keep projects organized. It directly shapes how organizations experience one of the most stressful moments they'll ever face.

Coordinate incident response projects across concurrent technical workstreams keeping everything and everyone aligned

Serve as the connection between clients, technical teams, legal counsel, and internal MOXFIVE stakeholders

Own project documentation: trackers, status reports, milestone logs, deliverable schedules, call cadence. They must be accurate, complete, and always current

Generate Statements of Work, change orders, and level of efforts with clear scope and pricing

Compile and distribute timely status updates that tell the story of where an engagement stands

Monitor project budgets, track time and expenses, and flag potential scope creep before they become a problem

Coordinate scheduling for client meetings, technical activities, and stakeholder briefings across a portfolio of active engagements

Identify and surface project risks early, working with stakeholders to keep things on course

Participate in a rotating on-call schedule (roughly once every six weeks) to support active incident response operations

Contribute to the ongoing improvement of MOXFIVE's project management processes and systems

3+ years of project coordination or project management experience, ideally in consulting, professional services, or technology environments

Exceptional organizational skills and meticulous attention to detail, you manage multiple concurrent projects without losing track of what matters

Strong written and verbal communication skills, with the ability to create clear, confident status reports and client-facing documentation

Proficiency with project management platforms 

Advanced skills in Microsoft Office, particularly Excel and PowerPoint

Comfort interfacing with clients, partners, and senior stakeholders in fast-moving, high-pressure situations

Financial tracking experience - budget monitoring, time tracking, and basic project accounting

A process-oriented mindset with an eye for where things can be done better

Bachelor's degree in business, communications, or a related field. Or the equivalent in real-world experience

Background in consulting, professional services, or client-facing coordination roles

Exposure to cybersecurity, IT services, or incident response environments

Experience generating SOWs, proposals, or contract documentation

Familiarity with legal or insurance-related project requirements

Experience with CRM systems like Salesforce or HubSpot

CAPM, PMP, CSM, or other project management certification (or actively working toward one)

MOXFIVE is seeking a Project Manager (Incident Response) to orchestrate complex cybersecurity engagements. This role involves coordinating technical workstreams, managing client communications, and overseeing project documentation and budgets during high-pressure incident response scenarios. The ideal candidate will ensure seamless delivery of forensics, remediation, and legal documentation services.

Project Manager (Incident Response)

If you feel like Incident Response and Recovery hasn’t changed in the past 10 years, you’re not alone. Business operations aren’t just on endpoints anymore. It’s behind applications in Okta tiles, auto-scaling workloads, code repos, and sprawling data stores across one or many public clouds. At MOXFIVE, we’re focused on eradicating adversaries across our client’s entire digital footprint, and that demands a faster, nimbler approach to DFIR.

We’re looking to expand our IR Consulting Team with individuals driven to protect clients, eliminate threat actors, and build the next era of digital forensics and incident response for the modern enterprise.

You know that $I30 isn’t referring to your local interstate, and that the easiest way to get on your bad side is to be handed a timestamp that isn’t in UTC. You’ve got a “Tools” folder sitting on your workstation somewhere with your favorite forensic scripts at the ready to tear into the next piece of suspicious activity you see. And speaking of suspicious activity, you’ve honed a keen sense for knowing the difference between legitimate users and threat actor activity because you’ve seen them in action. 
Hundreds of times. 

Windows environment investigations feel like the back of your hand at this point, and you’ve been starting to expand your knowledge on cloud-native forensics. Account takeovers are the new malware after all, and investigating the latest threats across Azure, GCP, AWS, and SaaS Apps is the growing frontier you’ve been looking to sink your teeth into.

Client conversations don’t scare you. You understand what it looks like to support a client team that’s going through their worst professional days with confidence and empathy.

You’re insatiably curious, addicted to threat intel, and a builder at heart. Ultimately, you’re looking for the right opportunity that uses your technical chops to find and eliminate meaningful adversaries while putting your stamp on a better approach to traditional DFIR consulting.

You’ll be joining a seasoned team of high performing incident response consultants that are the tip of the spear for all forensic activity at MOXFIVE. From ransomware to nation-state threats, you’ll be supporting and leading meaningful cases across traditional enterprise and cloud-native environments. We’re a startup in the truest sense, and your voice has significant weight in shaping our technology stack, investigative methodology, and service offerings as we continue to scale.

Experience responding to threat activity as an IR consultant or SOC analyst

Strong understanding of Windows/Mac/Linux fundamentals, forensic artifacts, and network analysis

Existing knowledge or passion to learn cloud-native investigations across AWS, GCP, and Azure

An unwavering emphasis on investigation at the highest level of quality

Perspective and voice to continue to shape our practice

This position is expected to work a schedule of Wednesday through Sunday, 1PM – 9:30PM Eastern time.

 It is a fully remote position, we are open to any location in the US, but preferably someone located in the Mountain or Pacific time zone.

Timezone Match Required

Shift Time

MOXFIVE is seeking a Senior Consultant for Digital Forensics and Incident Response (DFIR) to lead forensic activity and eradicate threat actors. The role involves managing complex cases across traditional enterprise and cloud-native environments, specifically utilizing AWS, Azure, and GCP. This is a fully remote US-based position with a specific Wednesday through Sunday work schedule.

Senior Consultant, DFIR (Wed-Sun)

You know that $I30 isn’t referring to your local interstate, and that the easiest way to get on your bad side is to be handed a timestamp that isn’t in UTC. You’ve got a “Tools” folder sitting on your workstation somewhere with your favorite forensic scripts at the ready to tear into the next piece of suspicious activity you see. And speaking of suspicious activity, you’ve honed a keen sense for knowing the difference between legitimate users and threat actor activity because you’ve seen them in action. Hundreds of times.

Windows environment investigations feel like the back of your hand at this point, and you’ve been starting to expand your knowledge on cloud-native forensics. Account takeovers are the new malware after all, and investigating the latest threats across Azure, GCP, AWS, and SaaS Apps is the growing frontier you’ve been looking to sink your teeth into.

MOXFIVE is seeking a Senior Consultant for their DFIR team to lead digital forensics and incident response efforts. The role involves eradicating threat actors across traditional enterprise and cloud-native environments, specifically utilizing AWS, Azure, and GCP. Candidates will handle complex cases ranging from ransomware to nation-state threats.

Senior Consultant, DFIR

We know high quality incident response starts and ends with great people. MOXFIVE is looking for the weekend warriors, the late-night crusaders, or any variation in between to do investigative work at a pace that matches your lifestyle.

You’re a “retired” incident responder that’s called it quits because of missed one too many holidays and an exhausting on-call schedule. If you’re honest though, you miss the investigation. Finding actual evil and seeing the latest threat activity is more exciting than your day job, and you’d love to get your fix on some live response data without committing all your waking hours.

You know that $I30 isn’t referring to your local interstate, and that the easiest way to get on your bad side is to be handed a timestamp that isn’t in UTC. You’ve got a “Tools” folder sitting on your workstation somewhere with your favorite forensic scripts at the ready to tear into the next piece of suspicious activity you see. And speaking of suspicious activity, you’ve honed a keen sense for knowing the difference between legitimate users and threat actor activity because you’ve seen them in action. 
Hundreds of times.

Windows environment investigations feel like the back of your hand at this point, and you’ve been starting to expand your knowledge on cloud-native forensics. Account takeovers are the new malware after all, and investigating the latest threats across Azure, GCP, AWS, and SaaS Apps is the growing frontier you’ve been looking to sink your teeth into.

You’re insatiably curious, addicted to threat intel, and an investigator at heart. Ultimately, you’d love an opportunity that allows you to get deeply technical and solve real cases at an intensity that’s compatible with your day job and every day life.

You’ll be joining a seasoned team of high performing incident response consultants as part of our contract bench that are the tip of the spear for all forensic activity at MOXFIVE. With that, you’ll be eligible for picking up live response work and analysis to support breaches ranging from ransomware to nation-state threats at a schedule that makes sense for you. Your analysis expands our capacity to support clients at the highest level of quality.

Strong understanding of Windows/Mac/Linux fundamentals, forensic artifacts, BEC analysis, and network analysis

At least a few free hours a week on your schedule to take on IR work. We’re day-job friendly (as long as your employer is cool with it).

$80 to $100 USD / billable hour based on skills and experience. Prorated full-time compensation of $160,000 to $200,000 USD.

MOXFIVE is hiring a Contract Incident Responder (DFIR) to join their expert bench for forensic investigations. The role focuses on eradicating adversaries across Windows and cloud-native environments, specifically AWS, Azure, and GCP. This remote position offers a flexible schedule for experienced investigators to handle live response and breach analysis.

Contract Bench, Incident Responder (DFIR)

Contract

Flexible Working Hours

Schedule Flexibility

MOXFIVE is seeking an Incident Response (DFIR) consultant for their international contract bench. The role involves performing forensic investigations and eradicating adversaries across Windows, Linux, and cloud environments including AWS, Azure, and GCP. This is a flexible, day-job friendly position focused on high-quality live response and threat analysis.

Timezone Matching

Remote Jobs at MOXFIVE

Hiring Locations

Benefits & Perks

Eligibility Requirements

💼 Open Jobs (9)