Remote DFIR Analyst — Forensics & Incident Response

Frsecure Llc; Town of King (WI); A distancia; USD 95.000 - 125.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible schedules

Remote or hybrid work options

Mental health & wellbeing support

Growth opportunities

Comprehensive benefits package

Unlimited paid time off

Descripción de la vacante

FRSecure is seeking a DFIR Analyst to join a fully remote team across the United States. You will conduct forensic reviews, triage incidents, and produce detailed reports while collaborating with clients during planning and response efforts.

We offer flexible schedules, a strong focus on wellbeing, and ongoing development with exposure to EDR/SIEM, tabletop exercises, and threat hunting opportunities.

Formación

• 3–5 years of information security experience.
• Experience with AD, Systems Administration, M365 and cloud environments.
• GCIH/GCFA/ECIH certifications preferred.
• Experience in threat hunting and incident handling.
• Ability to communicate highly technical topics to non-technical audiences.

Responsabilidades

• Perform forensic reviews of client systems to identify IOCs and eradicate malware.
• Triage, threat hunting, and case management for incident response clients.
• Document evidence, findings, and create client reports.
• Meet with clients during planning and information sharing stages.
• Lead tabletop exercises and plan coaching; conduct proactive projects.

Conocimientos

Information security

Incident response

Threat hunting

EDR

SIEM

Cloud environments

Active Directory

Microsoft Office

Herramientas

EDR tools

SIEM systems

Firewalls

Network devices

Descripción del empleo

FRSecure is seeking a DFIR Analyst to join a fully remote team across the United States. You will conduct forensic reviews, triage incidents, and produce detailed reports while collaborating with clients during planning and response efforts.

We offer flexible schedules, a strong focus on wellbeing, and ongoing development with exposure to EDR/SIEM, tabletop exercises, and threat hunting opportunities.