{"id":1099694,"url":"https://alion.io/job/moxfive-resilience-advisor","title":"Resilience Advisor","company":{"id":679027,"name":"MOXFIVE","domain":"moxfive.com","url":"https://alion.io/company/moxfive","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-21T19:11:28Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-02T18:57:59Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Who You Are\nYou've spent time inside breaches - and now you use everything you learned there to help organizations make sure they don't happen again. You don't just consume threat intelligence; you understand where it comes from. While others are citing vendor feeds, you're synthesizing attacker TTPs from real IR data and turning them into guidance your clients can act on.\nYou're comfortable facilitating a tabletop exercise with a hospital's incident response team and presenting a cyber resilience roadmap to a CFO. You know what attackers do - which misconfigurations they exploit, which identity gaps they walk through, which controls organizations think are working but aren't. And you know how to translate that into programs that close the gap before the next breach, not after.\nYou've built trusted advisor relationships before. You know that getting there means showing up with answers grounded in reality, not frameworks, and following through every time. You're organized enough to manage a portfolio of retainer clients, strategic enough to drive meaningful roadmap progress, and technically credible enough that security practitioners and executives both leave the room trusting what you said.\nWhy You Matter\nYou'll be joining MOXFIVE as a Resilience Advisor, owning client relationships and leading delivery for our MOXGUARD advisory practice - the program that converts real-world incident response lessons into prevention-first security programs.\nYou'll manage an active portfolio of retainer clients and help onboard new ones as the program scales. But this isn't a role that maintains the status quo. You'll be drawing from MOXFIVE's live IR operations to deliver intelligence most consultants never have access to, designing tabletop exercises based on attacks we investigated, and turning post-incident findings into deployed security improvements for clients across healthcare, financialservices, manufacturing, legal, government, and more.\nMost advisory programs offer frameworks. MOXGUARD offers a permanent post-incident perspective - and you're the one who brings it to life for every client in your portfolio.\nWhat You'll Do\nMOXGUARD Service Delivery\nOwn the client relationship and serve as the trusted advisor for your assigned MOXGUARD accounts across targeted verticals\n\nLead delivery of annual Active Directory posture reviews, identity gap analyses, and visibility evaluations\n\nDevelop and present each client's Annual Cyber Resilience Roadmap - a 12-month action plan built around their actual maturity, risk profile, and priorities\n\nFacilitate tabletop exercises grounded in real attack patterns from MOXFIVE's IR operations, including on-site sessions when in-person collaboration adds value\n\nConduct annual risk and exposure assessments across client environments and present actionable findings\n\nDrive recurring client meetings, keeping roadmap progress moving and advisory sharp\n\nCoordinate biannual policy and runbook alignment reviews - ensuring documentation reflects what works in real incidents, not just what sounds good on paper\n\nThreat Intelligence & Content Development\nDeliver monthly IR-informed threat intelligence briefings for both technical and executive audiences\n\nCommunicate patterns and trends observed across MOXFIVE's IR engagements - recurring misconfigurations, identity gaps, control failures - and embed those insights into client programs before they become incidents\n\nStrategic Consulting & Implementation\nLead implementation projects that originate from IR engagements, converting post incident recommendations into deployed solutions\n\nScope requirements, develop statements of work, oversee technical resources, and support delivery of Resilience consulting engagements\n\nIdentify opportunities to evolve consulting engagements into long-term MOXGUARD relationships\n\nPractice Development\nContribute to methodology refinement, template development, and process improvement across the practice\n\nSupport business development through scoping calls, proposals, and client presentations\n\nWhat You'll Bring\n6+ years of progressive cybersecurity experience, with at least 3 years in client facing advisory, consulting, or senior technical roles\n\nA strong technical foundation in incident response, digital forensics, and threat analysis - with the ability to translate IR findings into strategic advisory content and tailored client recommendations\n\nFoundational understanding of Active Directory security, identity and access management, and enterprise security architecture\n\nExperience delivering security assessments, gap analyses, remediation roadmaps, and implementation projects\n\nFamiliarity with EDR, SIEM, PAM, and other enterprise security platforms\n\nUnderstanding of cyber insurance processes, coverage requirements, and carrier expectations\n\nProven ability to build trusted relationships and communicate with credibility to both technical practitioners and C-suite executives\n\nStrong project management skills and the ability to manage multiple concurrent client engagements without losing the thread on any of them\n\nBonus points for:\nBachelor's degree in cybersecurity, computer science, information technology, or a related field\n\nIndustry certifications such as CISSP, CISM, GCIH, GCFA, or equivalent GIAC credentials\n\nBackground in a consulting firm or MSSP environment managing client portfolios\n\nExposure to incident response operations at scale\n\nFamiliarity with forensic sweep methodologies and threat hunting techniques\n\nExperience supporting cyber insurance underwriting or claims processes","description_format":"text","description_chars":5572,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Information Security","Incident Response"],"lifecycle":[{"event":"open","at":"2026-09-21T21:18:58Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":10,"expected_fill_days":38,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-02T05:45:00Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":true},"html_url":"https://alion.io/job/moxfive-resilience-advisor","json_url":"https://alion.io/job/moxfive-resilience-advisor.json","meta":{"generated_at":"2026-10-03T01:54:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1943,"day_limit":5000,"remaining_today":3057,"minute_limit":60,"resets_at":"2026-10-04T00:00:00Z"}}}