Remote DFIR Analyst: Incident Response & Forensics

Frsecure Llc; Lake Michigan Beach (MI); Hybrid; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible schedule

Remote or Hybrid work

Medical insurance

Dental insurance

Vision insurance

Health savings account

Flexible savings account

Dependent care savings account

Life and disability insurance

401(k) with employer match up to 4%

Pet insurance

Unlimited paid time off

Parental leave

Job summary

FRSecure is hiring a DFIR Analyst to support clients in incident response, tabletop exercises, and proactive projects. The role offers a remote-friendly setup with state-specific on-site options and a comprehensive benefits package.

You'll work in a collaborative team, handling high-risk investigations and delivering clear, actionable reports. The position requires 3–5 years in information security, AD/Exchange/M365 experience, and strong communication skills.

Qualifications

• 3–5 years of information security experience.
• 3–5 years with Active Directory, systems administration, Exchange administration, or M365/cloud environments.
• 3–5 years of presenting information security concepts.
• GCIH/GCFA/ECIH certifications preferred.
• Experience with threat hunting and incident handling.
• Experience with EDR and SIEM technologies.
• Experience with firewalls and network devices.

Responsibilities

• Perform forensic reviews of client systems for artifacts and IOCs to contain and eradicate threats.
• Conduct triage, threat hunting, and case management for IR clients.
• Document evidence, findings, and generate reports.
• Meet with clients during planning, information sharing, and technical support stages.
• Deliver proactive projects including tabletop exercises and plan coaching.
• Participate in regular client calls to advise on IR programs.
• Stay current with developments in cyber forensics and attack methods.
• Attend internal meetings and participate in the on-call rotation.

Skills

InfoSec experience

Active Directory

Systems Admin

Exchange Admin

M365

Cloud environments

Threat hunting

Incident handling

EDR

SIEM

Firewalls

Microsoft Office

Tools

Microsoft Office

Job description

FRSecure is hiring a DFIR Analyst to support clients in incident response, tabletop exercises, and proactive projects. The role offers a remote-friendly setup with state-specific on-site options and a comprehensive benefits package.

You'll work in a collaborative team, handling high-risk investigations and delivering clear, actionable reports. The position requires 3–5 years in information security, AD/Exchange/M365 experience, and strong communication skills.