---
title: 'Senior Restoration Engineer at MOXFIVE'
canonical: 'https://feeny.ai/job/senior-restoration-engineer-moxfive-remote-ap0g3vm0ndd4'
type: 'job'
last_seen: '2026-09-12'
---

# Senior Restoration Engineer at MOXFIVE

- **Company:** MOXFIVE
- **Location:** Remote
- **Compensation:** $95k–$150k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-06-08
- **Last confirmed live:** 2026-09-12
- **Apply:** https://jobs.ashbyhq.com/moxfive/d06e5937-699a-455c-8bee-b5947001b60d

## Job description

## Who You Are

You're the technical lifeline when everything goes dark. When ransomware brings a company to its knees at 2 AM, you know exactly which systems to prioritize, which backups are viable, and how to orchestrate recovery efforts to get critical business operations back online. Complex IT systems don’t intimidate you, they're puzzles you've spent 10+ years learning to solve under pressure.

You don't just know Active Directory; you've rebuilt it from scratch in production more times than you'd like to admit. You can architect hybrid cloud environments in your sleep, and you've navigated VMware, Azure, AWS, and on-premises infrastructure so many times that you know where the bottlenecks will be before they appear. You speak fluent backup and disaster recovery, no matter the backup solution.

You're equally comfortable in the trenches with sysadmins troubleshooting server or container infrastructures as you are explaining timelines to a CIO who needs to know when their business will be operational again.

You've built your career around keeping businesses running or bringing them back from the brink. You know that infrastructure restoration isn't a nine-to-five job; it's about being available when organizations need you most, working through the night if that's what it takes, and having the endurance to see a recovery through initial triage to full operational restoration. You thrive in chaos, you care obsessively about dependencies and sequencing, and you wouldn't trade this work for anything.

## Why You Matter

You'll be joining MOXFIVE as Senior Restoration Engineer, serving as a critical technical first responder within our Incident Response practice. When ransomware, destructive malware, or catastrophic system failures cripple an organization's infrastructure, you'll be the expert leading the technical restoration effort from the ground up.

In this role, you'll assess the scope of infrastructure damage, determine what can be recovered versus what must be rebuilt, orchestrate complex restoration sequences across hybrid and cloud environments, and make real-time technical decisions that directly determine how quickly a business can resume operations. You'll work alongside forensics teams, security analysts, legal counsel, insurance carriers and client leadership to ensure recovery efforts don't reintroduce threats while moving as quickly as possible.

When a company's entire infrastructure is down, they don't just need someone who knows technology, they need someone who's done this before, who understands the critical path to recovery, and who can work under extreme pressure without cutting corners. Your technical expertise and restoration experience directly determine whether a company recovers in days versus weeks, and whether they emerge with a more resilient infrastructure or simply limp back to a vulnerable state.

## What You'll Bring

- 10+ years of hands-on infrastructure experience building, managing, and restoring complex enterprise environments across private, hybrid, and cloud architectures (Azure, AWS, GCP, on-premises).
- Deep expertise in disaster recovery and business continuity, including backup technologies (Veeam, Commvault, Rubrik, etc.) and storage level snapshots, restoration methodologies, and recovery orchestration across interdependent systems.
- Proven incident response experience leading infrastructure restoration efforts during ransomware attacks, destructive malware events, or major system failures with demonstrated ability to work under extreme time pressure.
- Advanced knowledge of core infrastructure technologies including Active Directory, DNS, virtualization platforms (VMware, Hyper-V), storage systems, networking, and identity management systems.
- Leadership and coordination experience directing and guiding contractors, MSPs, internal IT teams, and third-party engineers through complex restoration plans, ensuring everyone understands their role, dependencies, and execution timelines while maintaining quality and security standards.
- Deep understanding of application architecture and dependencies, including how multi-tier applications work together (web servers, application servers, API servers, database servers, load balancers) and the ability to identify critical dependencies during restoration planning.
- Strong problem-solving and triage capabilities, able to rapidly assess damaged environments, identify critical dependencies, determine restoration priorities, and develop executable recovery plans in real-time.
- Excellent communication skills, capable of translating complex technical recovery details into clear status updates for executives, stakeholders, and cross-functional teams during high-stress situations.
- Collaborative mindset, comfortable working alongside forensics teams, security analysts, technical staff, and leadership while maintaining focus on rapid, secure restoration.

Disclaimer All official MOXFIVE communications will only come from an @[moxfive.com](http://moxfive.com) email address.

## About MOXFIVE

## Company Overview
- **One-liner**: MOXFIVE provides technical advisory services and a proprietary platform to help organizations respond to cyberattacks, minimize business impact, and build operational resilience.
- **Entity Type**: Private (growth-stage; secured a growth investment from Falfurrias in 2024)
- **Headquarters**: McLean, Virginia, United States (Tysons Corner area)
- **Founded**: 2019
- **Founders**: Mike Wager (CEO)

## Core Business
- **Primary industry**: Cybersecurity – incident response, digital forensics, and business resilience consulting.
- **Target customers**: B2B – organizations of all sizes (SMB to enterprise) that need rapid, expert-led response to ransomware, nation-state threats, and other cyber incidents.
- **Mission or purpose**: “Minimize the business impact of cyber attacks.”

## Products & Services
- **MOXFIVE Platform**: Proprietary platform that centralizes incident response milestones, project details, and costs across workstreams, providing full transparency during an attack.
- **Incident Response (IR) Services**: Technical Advisors lead forensics, containment, and recovery – including ransomware negotiation and restoration – using proven playbooks and an ecosystem of specialized providers.
- **Business Resilience & Advisory**: Proactive gap analysis, resilience roadmap building, and implementation services to harden environments against future attacks.
- **Agentic Forensics Platform**: Launched in 2025 – a next-generation digital incident response tool leveraging agentic AI to accelerate forensic investigations.

## Market Standing
- **Valuation/Market Cap**: Not disclosed.
- **Key Metric**: Total funding – the company raised a growth investment from Falfurrias (majority recapitalization announced August 2024); terms not disclosed. Also acquired modePUSH in 2025 to strengthen forensics capabilities.
- **Notable Investors/Partners**: Falfurrias Capital Partners (growth investor); strategic partnerships with technology and service providers (ecosystem of experts). Joined the Agentic AI Foundation in 2026.
- **Growth Signals**: 
  - Named to Inc. 5000 list of fastest-growing private companies (2023, 2024).
  - Recognized as Inc. Best Workplaces honoree (2023, 2024, 2025).
  - Named Cyber Security Consulting Services Team of the Year by Intelligent Insurer (2024, 2025).
  - Employee headcount grew ~47.6% year over year (48 employees on LinkedIn, 56 on Built In – indicative of rapid scaling).
  - Managed over 3,500 incident response events; saved victims more than $300 million in 2024 alone.
  - Average 40%+ reduction in days to recover using their playbooks and platform.

## Competitive Advantages
- **Platform + Talent Model**: Combines a proprietary orchestration platform with experienced Technical Advisors who have deep IT and security operational backgrounds, enabling faster, more consistent outcomes than traditional consulting firms.
- **Scalable Ecosystem**: Leverages pre-vetted third-party experts and technology partners so the right skills are deployed rapidly without overstaffing.
- **Business-First Lens**: Technical decisions are framed by business impact, making them a trusted advisor to both IT teams and C-suite executives.

## Strategic Focus
- **Expanding Forensics & AI Capabilities**: The acquisition of modePUSH and launch of the Agentic Forensics Platform signal a push to automate and accelerate digital forensics.
- **International Growth**: Presence already in UK, UAE, and India; likely expanding geographic coverage.
- **Scaling the Team**: Continuous hiring for technical roles (DFIR Consultants, Restoration Engineers, Technical Advisors, Project Managers) to handle increasing incident volumes.

## Why Work Here
- **Culture & Values**: Built on five core values – Accountability, Excellence, Collaboration, Integrity, and Resilience. Described as collaborative, team-oriented, and mission-driven.
- **Work Model**: Remote-first organization (headquarters in Tysons Corner, VA but most roles are remote). Some positions may require flexible schedules (e.g., Wed–Sun for DFIR consultants).
- **Perks & Benefits**: Competitive compensation + bonus, immediate 401k with company match, unlimited PTO, paid parental leave, health/dental/vision insurance, professional development reimbursement for training and certifications.
- **Engineering & IR Culture**: High-impact work – “you’re the first person people call in an emergency.” Voice in shaping technology stack and methodology as the company scales.
- **Recognition**: Three-time Inc. Best Workplaces honoree and ranked #1 security company on the Inc. 5000 in 2023.

## Sources
1. [MOXFIVE Official Website](https://www.moxfive.com/)
2. [About Us - MOXFIVE](https://www.moxfive.com/about-us)
3. [Careers - MOXFIVE](https://www.moxfive.com/career)
4. [Built In Profile](https://builtin.com/company/moxfive)
5. [LinkedIn Company Page](https://www.linkedin.com/company/moxfive)
6. [PRWeb - MOXFIVE Acquires modePUSH](https://www.prweb.com/releases/moxfive-acquires-modepush-to-strengthen-forensics-expertise-and-deliver-a-next-generation-incident-response-experience-302407115.html) (via LinkedIn)
7. [FinTech Global - Falfurrias Investment](https://fintech.global/2024/08/28/moxfive-secures-growth-investment-from-falfurrias-to-enhance-cyber-defenses/) (via LinkedIn)

## Other roles at MOXFIVE

- [Principal DFIR Consultant](https://feeny.ai/job/principal-dfir-consultant-moxfive-remote-421pq11q0j06)
- [Technical Advisor](https://feeny.ai/job/technical-advisor-moxfive-remote-x1jz7dcmyjxg)
- [Senior Consultant, DFIR (Wed-Sun)](https://feeny.ai/job/senior-consultant-dfir-wed-sun-moxfive-remote-52rtvmqpy13g)
- [Managing Director, Resilience Advisory](https://feeny.ai/job/managing-director-resilience-advisory-moxfive-remote-y6rsjbyrsjse)
- [Technical Sales Executive](https://feeny.ai/job/technical-sales-executive-moxfive-remote-pj8shkshxmka)
- [Director of Customer Success](https://feeny.ai/job/director-of-customer-success-moxfive-remote-9m19mya8sea0)
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-moxfive-remote-vzxnmr574ted)
- [Project Manager (Incident Response)](https://feeny.ai/job/project-manager-incident-response-moxfive-remote-yznssq028nw4)
- [Contract Bench, Incident Responder (DFIR)](https://feeny.ai/job/contract-bench-incident-responder-dfir-moxfive-remote-d2dfbfayknny)
- [International Contract Bench, Incident Response (DFIR)](https://feeny.ai/job/international-contract-bench-incident-response-dfir-moxfive-global-5e7ft6q00nm8) — Global