Remote DFIR Analyst: Incident Response & Forensics

Frsecure Llc; Pennsylvania; Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work environment (remote orhy

Mental health & wellbeing support

Growth & development opportunities

Comprehensive benefits (medical, dent,

Job summary

FRSecure is seeking a DFIR Analyst for a fully remote role across the United States. You will perform forensic reviews, triage incidents, and manage client IR cases while delivering proactive security projects.

The role emphasizes communication with clients, strong technical delivery, and adherence to SLAs. Ideal candidates have 3–5 years in information security, experience with AD/M365/EDR/SIEM, and relevant certifications.

Qualifications

• 3–5 years of information security experience.
• Experience with AD, systems administration, Exchange, and cloud environments.
• 3–5 years presenting information security concepts.
• GCIH/GCFA/ECIH certifications preferred.
• Experience with threat hunting and incident handling.
• Experience with EDR/SIEM technologies.
• Familiarity with firewalls and network devices.
• Strong analytical skills and data interpretation.
• Excellent customer service and ability to explain technical topics to non-technical audiences.

Responsibilities

• Perform forensic reviews for artifacts and indicators of compromise (IOCs) to identify and eradicate malware.
• Conduct triage, threat hunting, and case management for incident response clients.
• Document evidence, findings, and create detailed reports.
• Meet with clients during planning and information sharing stages.
• Deliver proactive projects such as tabletop exercises and plan coaching.
• Participate in on-call rotation and ensure SLA adherence.

Skills

Information security

Threat hunting

Incident handling

Communication

Customer service

Tools

Active Directory

M365

SIEM

EDR

Firewalls

Job description

FRSecure is seeking a DFIR Analyst for a fully remote role across the United States. You will perform forensic reviews, triage incidents, and manage client IR cases while delivering proactive security projects.

The role emphasizes communication with clients, strong technical delivery, and adherence to SLAs. Ideal candidates have 3–5 years in information security, experience with AD/M365/EDR/SIEM, and relevant certifications.