Fenix24 is an industry-leading cyber disaster recovery and restoration company. Battling threat actors as The World’s First Civilian Cybersecurity Force, Fenix24 delivers cybersecurity services through its four battalions: Fenix24 for ransomware recovery and restoration; Athena7 for IT security assessments, strategy and planning; Grypho5 for ongoing security-based management; and Argos99 for expert insights into data, assets and infrastructure. Under its Securitas Summa program, Fenix24 ensures organizations are prepared to effectively resist and rapidly recover from a cyberattack, offering a combination of managed data and infrastructure protection, real-time threat intelligence, and ongoing hardening and breach resistance.
Fenix24 is one of four battalions fighting threat actors on the front lines of the global cyber war. As part of The World’s First Civilian Cybersecurity Force, Fenix24’s army of battle-tested specialists deliver ransomware restoration and recovery services to bring an organization’s operations back online effectively and efficiently. Fenix24 provides an assurance of recovery in the event of a cyberattack, leading to the full restoration of critical infrastructure, data and systems, with a minimum of downtime and financial loss.

QUALIFICATIONS, REQUIREMENTS & PREFERRED SKILLS

• Competent level skill in the following skill topics:
• Routing/Switching - Recall port configs, assign relevant port parameters.
• Implement static routing and troubleshoot existing route tables and find devices based on ARP/MAC tables.
• VMware - Understand the in’s and out’s of the Hyperconverged system but need assistance making changes.
• Can perform basic admin functions.
• Backups - Run restoration jobs across various backup solutions and verify data recovery integrity.
• Hyper-V - Perform Hyper-V discoveries, migrate VMs between environments, and script basic Hyper-V tasks.
• Advanced level skills in the following skill topics:
• Active Directory - Fully replace a domain controller from scratch, including most roles, features, and specific configurations (DHCP, DFS, DNS, etc.) - Verify all features are working.
• Seize all FSMO roles and validate functionality; to include META DATA cleanup and Sysol replication.
• Understand Domain forests to include Parent and child relationships.
• Perform an AD system state backup. Can configure EntraID with some guidance.
• XDR/EDR - Deploy EDR to any OS, including Windows, Linux, and Mac, and generate new reports, pull packages, and make certain changes within the EDR console.
• Generate reports on deployment status and automate installations as needed through PDQ.
• Perform basic console connection issues between the EDR agent and console.
• Forensic collections - Run collections on any endpoint OS, virtual hosts, and appliances.
• Perform advanced troubleshooting.
• Run FTK imager and provide full disk imaged to DFIR through SFTP, ShareFile, etc

• Mid-Level Ransomware Engineer
• Provides technical support on engagement workstreams during client engagements, ensuring adherence to established restoration processes targets.
• Utilizes resources, skillsets, and time effectively for engagement success.
• Communicates and coordinates internal and external restoration specific tasks.
• Client-Facing Responsibilities
• Attend, when required, client-facing collaboration rooms, monitoring communications via platforms like Teams, Slack, and Signal.
• When required, use discretion in sensitive client communications, particularly in cases involving data breaches or high-impact incidents.
• Reporting and Documentation
• Provide daily updates on status of client engagement work accomplished to internal stakeholders
• Document new troubleshooting processes and procedures for internal use.
• Assist in the development of client-specific processes and procedures of technical nature, when required
• Regional and International Support
• Provide technical support for client engagements in the U.S., EMEA, and APAC regions, operating across various time zones as required.