Remote DFIR Analyst: Incident Response & Forensic Expert

Frsecure Llc; Boston (MA); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible Work Environment

Mental Health & Wellbeing Support

Growth & Development

Comprehensive Benefits Package

Generous Time Off

Job summary

FRSecure, LLC is seeking a DFIR Analyst to provide high-quality incident response investigations across varied security environments. You will lead proactive projects, perform triage, and advise clients on remediation steps to restore normal operations.

The role supports remote work within eligible US states and requires strong communication with clients. Ideal candidates have 3–5 years in information security, experience with AD, cloud environments, and incident handling.

Qualifications

• 3-5 years of information security experience.
• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3-5 years of experience in presenting information security concepts.

Responsibilities

• Perform forensic reviews of client systems to identify IOCs and malware.
• Conduct triage, threat-hunting, and case management for incident response clients.
• Document evidence, findings, and generate client reports.
• Meet with clients during planning, information sharing, and technical support stages.
• Create and deliver proactive projects like tabletop exercises and plan coaching.
• Participate in on-call rotation and respond within SLAs.

Skills

Information security

Incident handling

Threat hunting

EDR/SIEM experience

Firewalls & networks

Microsoft Office

Communication skills

Data analysis

Education

GCIH, GCFA, ECIH certifications preferred

Tools

EDR

SIEM

Firewall devices

Job description

FRSecure, LLC is seeking a DFIR Analyst to provide high-quality incident response investigations across varied security environments. You will lead proactive projects, perform triage, and advise clients on remediation steps to restore normal operations.

The role supports remote work within eligible US states and requires strong communication with clients. Ideal candidates have 3–5 years in information security, experience with AD, cloud environments, and incident handling.