Remote DFIR Analyst: Incident Response & Forensics

Frsecure Llc; Edina (MN); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work

Meaningful work

Mental health support

Professional development

Benefits package

Generous PTO

Job summary

FRSecure is seeking a DFIR Analyst to provide high-quality incident response investigations and guidance across varied security environments. You will lead proactive efforts like tabletop exercises, while handling triage, case work, and client communications to minimize business disruption.

Regular client interactions and ongoing learning opportunities are central to the role, with remote or hybrid options and a focus on delivering accountable security outcomes.

Qualifications

• 3–5 years of information security experience.
• Experience with Active Directory, systems administration, Exchange/ cloud environments.
• 3–5 years presenting information security concepts.
• Certifications: GCIH/GCFA/ECIH preferred.
• Experience in threat hunting and incident handling.
• Experience managing EDR/SIEM technologies.
• Knowledge of firewalls, network logging, and best practices.
• Strong systems administration background in large environments.
• Analytical skills to interpret data and identify trends.
• Ability to explain complex topics to diverse audiences.
• Customer-focused, solution-oriented mindset.
• Data handling capabilities and proficiency with Office suite.

Responsibilities

• Perform forensic review of client systems for artifacts and IOCs.
• Conduct triage, threat hunting, and case management for IR clients.
• Document evidence, findings, and prepare reports.
• Meet with clients during planning and information sharing stages.
• Develop and deliver proactive projects including tabletop exercises.
• Maintain regular client communications on incident response programs.
• Continue education on cyber forensics and attack methodologies.
• Participate in internal meetings and on-call rotations.

Skills

Information security experience

Active Directory

Cloud environments

Security concepts

Certifications (GCIH/GCFA/ECIH)

Threat hunting

EDR/SIEM management

Firewalls & logs

Systems administration

Analytical skills

Communication skills

Customer service

Data handling

Microsoft Office

Tools

EDR

SIEM

Job description

FRSecure is seeking a DFIR Analyst to provide high-quality incident response investigations and guidance across varied security environments. You will lead proactive efforts like tabletop exercises, while handling triage, case work, and client communications to minimize business disruption.

Regular client interactions and ongoing learning opportunities are central to the role, with remote or hybrid options and a focus on delivering accountable security outcomes.