PHP Malware Cleanup Specialist

Looking for someone who has investigated and cleaned compromised PHP ecommerce/CMS systems before. Access will be provided through SSH and SFTP. Responsibilities: * Investigate suspicious behavior within a PHP-based ecommerce application * Review application files, server configuration, scheduled tasks, and logs * Identify malicious code, unauthorized modifications, or persistence mechanisms * Remove malicious components and document findings * Verify application functionality after remediation To be considered, please answer: 1. Describe a malware cleanup or compromise investigation you completed on a PHP application. 2. What are the most common persistence mechanisms you encounter after an initial cleanup? 3. How do you distinguish between an application compromise and a server-level compromise? 4. Which Linux commands do you commonly use during incident investigation? 5. Are you comfortable working directly through SSH on a production server? Please include your estimated turnaround time and fixed-price quote.