Remote DFIR Analyst — Incident Response Expert

Frsecure Llc; Georgia; Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible schedule

Remote work options

Mental health & wellbeing support

Growth & development

Comprehensive benefits package

Generous time off

Job summary

FRSecure, LLC is seeking a DFIR Analyst to support clients after cyber incidents through high-quality investigations, containment, and remediation guidance. The role blends proactive project work with triage and case handling in varied security environments.

Ideal candidates have 3–5 years in information security and hands-on experience with AD, cloud services, and incident response. Remote work is available for U.S. states including GA; strong communication and reporting skills are required.

Qualifications

• 3–5 years of information security experience.
• 3–5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3–5 years of experience in presenting information security concepts.
• GC I H/GCFA/ECIH certifications preferred.
• Prior experience in threat hunting and incident handling.
• Experience with firewalls and network devices and logging.
• Proficient with Microsoft Office Suite.

Responsibilities

• Perform forensic review of client systems for artifacts and indicators of compromise.
• Triage, threat-hunting, and case management for incident response clients.
• Document evidence, findings, and create a report output.
• Meet with clients during planning, information sharing, and technical support stages.
• Create and deliver proactive projects including tabletop exercises and plan coaching.
• Conduct regular client calls to discuss incident response programs.
• Continue education on developments in cyber forensics/attack methodologies.

Skills

InfoSec experience

Active Directory

Cloud environments

M365

Threat hunting

Incident handling

EDR/SIEM

Firewalls & logs

Communication skills

Tools

EDR

SIEM

Job description

FRSecure, LLC is seeking a DFIR Analyst to support clients after cyber incidents through high-quality investigations, containment, and remediation guidance. The role blends proactive project work with triage and case handling in varied security environments.

Ideal candidates have 3–5 years in information security and hands-on experience with AD, cloud services, and incident response. Remote work is available for U.S. states including GA; strong communication and reporting skills are required.