Contract Bench, Incident Responder – DFIR

MOXFIVE

Incident Responder engaged in DFIR work with a focus on investigations into threat activity. Join MOXFIVE to support clients' digital footprints in a flexible, contract position.

Posted 6/24/2026contractRemote • 🇺🇸 United StatesMid-LevelSenior💰 $80 - $100 per hourWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinux

About the role

Key responsibilities & impact

Investigative work on live response data without committing all your waking hours
Responding to breaches ranging from ransomware to nation-state threats
Collaborating with a seasoned team of incident response consultants

Requirements

What you’ll need

Experience responding to threat activity as an IR consultant or SOC analyst
Strong understanding of Windows/Mac/Linux fundamentals, forensic artifacts, BEC analysis, and network analysis
Existing knowledge or passion to learn cloud-native investigations across AWS, GCP, and Azure
An unwavering emphasis on investigation at the highest level of quality
Perspective and voice to continue to shape our practice
At least a few free hours a week on your schedule to take on IR work. We’re day-job friendly (as long as your employer is cool with it).

Benefits

Comp & perks

Flexible work arrangements
Professional development opportunities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responseforensic analysisnetwork analysisBEC analysisWindows fundamentalsMac fundamentalsLinux fundamentalscloud-native investigationsAWSGCP

Soft Skills

collaborationinvestigative skillsquality emphasisperspectivecommunication