Remote DFIR Analyst: 24/7 Incident Response & Forensics

CyberClan; United States; Remote; USD 85,000 - 110,000; Full time

Benefits offered by this job

Paid Time Off

Paid Wellness Leave

Paid Birthday Day Off

401k Matching

Job summary

CyberClan in the United States is seeking an experienced DFIR Specialist to join our 24/7 incident response team. You will support a wide array of technologies, perform on-the-fly troubleshooting, and help advance our IR capabilities.

You will conduct live endpoint investigations, document methods, coordinate with third parties, and contribute to post-breach remediation. This full-time remote role requires 2–3 years in DFIR and relevant certifications.

Qualifications

• Minimum 2-3 years of experience in DFIR.
• Experience in deployment and management of EDR technology.
• Experience with Security Technologies and NIST Framework.
• Developing, documenting and implementing incident response methods, processes.
• Perform live endpoint investigations.
• Experience in forensic investigations both on-premise and cloud.
• Must be available to provide coverage to meet business requirements in 3 regions.
• Strong knowledge of DFIR tools.
• Strong knowledge of virtualization technologies, operating systems, firewalls, VPNs, SIEM.

Responsibilities

• Support a wide number of technologies and perform advanced troubleshooting on the fly (packet captures, debugs, traffic analysis).
• Develop and edit Incident Response methods and guidelines for the organization.
• Perform live-endpoint investigations and provide remediation actions as needed.
• Implement and deploy an Incident Response focused ticketing system to improve incident tracking and metrics.
• Collaborate with 3rd parties to assist with incident response and remediation.
• Develop high-level technical reports in response to clients.
• Serve on a 24x7/365 service delivery team handling incident response and root-cause analysis.

Skills

DFIR

EDR management

NIST framework

Live endpoint analysis

Forensic investigations

Education

GCIH

GCFE

Tools

SIEM

Virtualization

Firewalls

Job description

CyberClan in the United States is seeking an experienced DFIR Specialist to join our 24/7 incident response team. You will support a wide array of technologies, perform on-the-fly troubleshooting, and help advance our IR capabilities.

You will conduct live endpoint investigations, document methods, coordinate with third parties, and contribute to post-breach remediation. This full-time remote role requires 2–3 years in DFIR and relevant certifications.