Remote DFIR Analyst — Incident Response & Forensic Lead

Frsecure Llc; Clayton (NC); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible schedule

Remote or hybrid work options

Mental health support

Professional development

Comprehensive benefits package

Unlimited PTO

Job summary

FRSecure seeks an experienced DFIR Analyst to support clients during cyber incidents. The role is remote within the United States with headquarters in Edina, MN, offering flexible schedules and a strong emphasis on collaboration and continuous learning.

The candidate will conduct forensic reviews, triage incidents, create detailed reports, and participate in proactive projects while maintaining SLAs and contributing to a secure client experience.

Qualifications

• 3-5 years of information security experience.
• Experience with AD, cloud environments (M365).
• Experience presenting information security concepts.

Responsibilities

• Perform forensic reviews for artifacts and IOCs.
• Triage, threat-hunting, and incident client management.
• Document evidence, findings, and deliver reports.
• Engage with clients during planning and support stages.
• Lead proactive projects like tabletop exercises and plan coaching.
• Participate in on-call rotation and after-hours support.

Skills

InfoSec experience

Active Directory

M365

Threat hunting

Incident handling

EDR / SIEM

Firewalls

Network devices

Data analysis

Customer service

Technical communication

Big data

MS Office

Education

GCIH/GCFA/ECIH certifications preferred

Tools

Active Directory

M365

EDR

SIEM

Firewalls

Job description

FRSecure seeks an experienced DFIR Analyst to support clients during cyber incidents. The role is remote within the United States with headquarters in Edina, MN, offering flexible schedules and a strong emphasis on collaboration and continuous learning.

The candidate will conduct forensic reviews, triage incidents, create detailed reports, and participate in proactive projects while maintaining SLAs and contributing to a secure client experience.