Remote DFIR Analyst: Forensics & Incident Response

Frsecure Llc; Michigan; Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work environment

Remote or hybrid options

Employee assistance program (EAP)

Professional development support

Medical, dental, vision insurance

Job summary

FRSecure is seeking a DFIR Analyst to provide high-quality incident response investigations and proactive DFIR projects for clients across the United States. The role involves leading triage, documenting findings, and advising on remediation while working remotely from home offices in supported states.

Candidates should have 3–5 years in information security, experience with AD/M365/cloud environments, and strong communication skills to explain technical concepts to diverse audiences.

Qualifications

• 3–5 years of information security experience.
• Certifications preferred: GCIH, GCFA, ECIH.
• Experience with Active Directory, Exchange Administration, M365 and cloud environments.
• Proven ability to communicate complex technical topics to non-technical audiences.

Responsibilities

• Perform forensic reviews to identify artifacts and IOCs.
• Lead triage, threat-hunting and case management for IR clients.
• Document evidence, findings and generate client-ready reports.
• Interact with clients during planning, information sharing, and technical support stages.
• Develop proactive projects such as tabletop exercises and plan coaching.
• Conduct client calls to discuss IR programs and improvements.
• Stay updated on cyber forensics and attack methodologies.

Skills

Analytical skills

Clear communication

Customer service

Threat hunting

Incident handling

Tools

EDR

SIEM

Firewalls

Cloud environments (AD, M365)

Job description

FRSecure is seeking a DFIR Analyst to provide high-quality incident response investigations and proactive DFIR projects for clients across the United States. The role involves leading triage, documenting findings, and advising on remediation while working remotely from home offices in supported states.

Candidates should have 3–5 years in information security, experience with AD/M365/cloud environments, and strong communication skills to explain technical concepts to diverse audiences.