Remote DFIR Analyst: Incident Response & Forensics

Frsecure Llc; Athens (GA); Remote; USD 95,000 - 125,000; Full time

Job summary

FRSecure, LLC is seeking a DFIR Analyst to support clients in investigating cyber incidents and guiding remediation. The role emphasizes high-quality incident response investigations across environments with growth opportunities in tabletop exercises and plan coaching.

Candidates should have 3–5 years in information security, experience with AD, M365, cloud environments, and familiarity with EDR/SIEM. This is a full-time remote position within the United States.

Qualifications

• 3-5 years of information security experience.
• Experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3-5 years of experience in presenting information security concepts.
• GCIH, GCFA, ECIH certifications preferred.
• Experience with EDR and SIEM technologies.
• Strong customer service and communication skills.

Responsibilities

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs).
• Conducting triage, threat-hunting, and case management for incident response clients.
• Documenting detailed evidence, findings, and create a report output.
• Meeting with clients during the planning, information sharing, and technical support stages.
• Creating and delivering proactive projects to clients including tabletop exercises and plan coaching.
• Conducting regular calls with clients to consult on incident response programs.
• Continuing education by researching developments in cyber forensics/attack methodologies.
• Attending and participating in regular internal meetings.
• Participating in on-call rotation and meeting SLAs.
• Performing periodic after-hours and weekend on-call work.

Skills

Incident response

Threat hunting

Communication skills

Customer service

Education

Security certifications (GCIH/GCFA/ECIH)

Tools

Active Directory

Systems Administration

Exchange Administration

M365 / Microsoft 365

Cloud environments

EDR/SIEM tools

Firewalls & network devices

Job description

FRSecure, LLC is seeking a DFIR Analyst to support clients in investigating cyber incidents and guiding remediation. The role emphasizes high-quality incident response investigations across environments with growth opportunities in tabletop exercises and plan coaching.

Candidates should have 3–5 years in information security, experience with AD, M365, cloud environments, and familiarity with EDR/SIEM. This is a full-time remote position within the United States.