Incident Response (DFIR)

About the Company

MOXFIVE is focused on eradicating adversaries across our client’s entire digital footprint. We provide a faster, nimbler approach to DFIR, focusing on applications, auto-scaling workloads, code repos, and sprawling data stores across public clouds.

Responsibilities

• Perform live response work and forensic analysis to support breaches ranging from ransomware to nation-state threats
• Conduct investigations across Windows, Mac, Linux, and cloud-native environments
• Analyze threat activity across Azure, GCP, AWS, and SaaS applications
• Provide high-quality investigative analysis on a flexible, contract basis

Requirements

• Experience responding to threat activity as an IR consultant or SOC analyst
• Strong understanding of Windows, Mac, and Linux fundamentals
• Proficiency in forensic artifacts, BEC analysis, and network analysis
• Knowledge of or passion for cloud-native investigations (AWS, GCP, Azure)
• Availability for at least a few hours per week to take on IR work