Remote DFIR Analyst - Incident Response & Forensics

Frsecure Llc; Montana City (MT); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work environment

Remote or hybrid options

Mental health & wellbeing support

Growth & development

Comprehensive benefits

Unlimited PTO & parental leave

Job summary

FRSecure seeks an experienced DFIR Analyst to provide high-quality incident response support for clients nationwide. The role involves forensic reviews, triage, threat hunting, and project leadership, with opportunities to conduct tabletop exercises and plan coaching.

Applicants should have 3–5 years in information security, hands-on experience with AD, cloud services, EDR/SIEM, and strong communication and customer-service skills.

Qualifications

• 3-5 years of information security experience.
• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• GCIH, GCFA, ECIH certifications preferred
• Prior experience in threat hunting and/or incident handling
• Prior experience in management of EDR and/or SIEM technologies

Responsibilities

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs) to identify, contain, and eradicate malware and/or intruders
• Conducting triage, threat-hunting, and case management for incident response clients
• Documenting detailed evidence, findings, and create a report output
• Meeting with clients during planning, information sharing, and technical support stages
• Creating and delivering proactive projects to clients including tabletop exercises and plan coaching
• Conducting regular calls with clients to consult on incident response programs
• Continuing education by researching developments in cyber forensics/attack methodologies
• Attending and participating in regular internal meetings
• Participating in on-call rotation and provide timely support while meeting SLAs
• Performing periodic after-hours and weekend on-call work

Skills

Information security

Incident response

Threat hunting

Active Directory

EDR management

SIEM usage

Network security

Communication skills

Customer service

Data analysis

Microsoft Office

Job description

FRSecure seeks an experienced DFIR Analyst to provide high-quality incident response support for clients nationwide. The role involves forensic reviews, triage, threat hunting, and project leadership, with opportunities to conduct tabletop exercises and plan coaching.

Applicants should have 3–5 years in information security, hands-on experience with AD, cloud services, EDR/SIEM, and strong communication and customer-service skills.