Remote DFIR Analyst — Forensics & Incident Response

Frsecure Llc; Idaho Falls (ID); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible schedules

Remote or hybrid work options

Mental health support

Growth opportunities

Comprehensive benefits

Generous paid time off

Volunteer time off

Job summary

FRSecure is seeking a DFIR Analyst to support clients through incident response investigations, threat hunting, and evidence documentation. You will lead triage, case management, and proactive engagements while advising on containment and remediation in diverse environments.

The role emphasizes collaboration with clients, ongoing learning, and participation in on-call rotations, with a remote-first setup across multiple US states. Strong communication and customer-service skills are essential.

Qualifications

• 3-5 years of information security experience.
• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3-5 years of experience in presenting information security concepts.
• GCIH, GCFA, ECIH certifications preferred.
• Prior experience in threat hunting and/or incident handling.
• Prior experience in management of EDR and/or SIEM technologies.
• Experience with firewalls and network devices best practices and logging.
• Solid understanding of computer systems administration in large environments.
• Demonstrated analytical skills to interpret data, identify trends, and ensure accuracy in all deliverables.
• Ability to clearly convey complex information to diverse audiences and actively listen to understand needs and provide effective solutions.
• Proven customer service skills with a customer-focused mindset, including the ability to build relationships, resolve issues effectively, and deliver a positive, responsive client experience.
• Ability to communicate highly technical topics to non-technical people effectively.

Responsibilities

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs) to further identify, contain, and eradicate malware and/or malicious intruders.
• Conducting triage, threat-hunting, and case management for incident response clients.
• Documenting detailed evidence, findings, and create a report output.
• Meeting with clients during the planning, information sharing, and technical support stages.
• Creating and delivering proactive projects to clients including tabletop exercises, plan coaching, assessments.
• Conducting regular calls with clients to consult on incident response programs.
• Continue education by researching and investigating developments in cyber forensics/attack methodologies; increase existing skillset to handle these matters.
• Attending and participating in regular internal meetings.
• Participating in on-call rotation, providing timely and effective support to clients, ensuring adherence to service level agreements (SLAs) and resolving issues within established response and resolution times.
• Performing periodic after-hours and weekends on-call work.

Skills

Active Directory

Systems Administration

Exchange Administration

M365

Cloud environments

Tools

EDR

SIEM

Firewalls

Job description

FRSecure is seeking a DFIR Analyst to support clients through incident response investigations, threat hunting, and evidence documentation. You will lead triage, case management, and proactive engagements while advising on containment and remediation in diverse environments.

The role emphasizes collaboration with clients, ongoing learning, and participation in on-call rotations, with a remote-first setup across multiple US states. Strong communication and customer-service skills are essential.