Remote DFIR Analyst: Cyber Incident Response & Forensics

Frsecure Llc; North Carolina; Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work options

Remote work across states

Competitive benefits package

Job summary

FRSecure seeks a DFIR Analyst to provide high-quality incident response support and forensics across varied environments. You will lead investigations, triage incidents, and guide clients through recovery and remediation while coordinating tabletop exercises and plan coaching with a focus on security maturity.

Ideal candidates have 3-5 years in information security, familiarity with AD, M365, EDR and SIEM, and strong communication skills for cross-functional collaboration.

Qualifications

• 3-5+ years of information security experience.
• Experience with threat hunting and incident handling.
• Familiarity with Active Directory, cloud environments and M365.
• GCIH/GCFA/ECIH certifications are a plus.

Responsibilities

• Perform forensic reviews to identify artifacts and indicators of compromise.
• Triage, threat-hunting, and incident handling for clients.
• Document evidence, findings and produce client reports.
• Engage with clients during planning, information sharing, and technical support stages.
• Develop proactive projects such as tabletop exercises and plan coaching.
• Participate in on-call rotation and client communications.

Skills

InfoSec experience

Threat hunting

Incident handling

Analytical skills

Customer service

Communication skills

Microsoft Office

Education

GCIH

GCFA

ECIH

Tools

Active Directory

Systems Administration

Exchange Administration

M365

EDR

SIEM

Firewalls

Networking devices

Job description

FRSecure seeks a DFIR Analyst to provide high-quality incident response support and forensics across varied environments. You will lead investigations, triage incidents, and guide clients through recovery and remediation while coordinating tabletop exercises and plan coaching with a focus on security maturity.

Ideal candidates have 3-5 years in information security, familiarity with AD, M365, EDR and SIEM, and strong communication skills for cross-functional collaboration.