Remote DFIR Analyst - Incident Response & Forensics

Frsecure Llc; Saint Paul (MN); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work environment

Meaningful, mission-driven work

Mental health & wellbeing support

Growth & development

Comprehensive benefits package

Generous time off

Job summary

FRSecure, LLC in the United States seeks a DFIR Analyst to support clients during cyber incidents, conducting high-quality investigations and advising on remediation. You will lead proactive projects like tabletop exercises and plan coaching while handling triage and case work.

The role involves remote work with some on-site as needed, with a strong emphasis on incident response, client communication, and continuous learning in cyber forensics and attack methodologies.

Qualifications

• 3-5 years of information security experience.
• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3-5 years of experience in presenting information security concepts.
• GCIH, GCFA, ECIH certifications preferred.
• Prior experience in threat hunting and/or incident handling.
• Prior experience in management of EDR and/or SIEM technologies.
• Experience with firewalls and network devices best practices and logging.
• Solid understanding of computer systems administration in large environments.
• Demonstrated analytical skills to interpret data, identify trends, and ensure accuracy in all deliverables.
• Ability to clearly convey complex information to diverse audiences and actively listen to understand needs and provide effective solutions.
• Proven customer service skills with a customer-focused mindset, including the ability to build relationships, resolve issues effectively, and deliver a positive, responsive client experience.
• Ability to communicate highly technical topics to non-technical people effectively.
• Ability to handle and work with large amounts of data.
• Proficient with all Microsoft Office Suite products.

Responsibilities

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs) to further identify, contain, and eradicate malware and/or malicious intruders.
• Conducting triage, threat-hunting, and case management for incident response clients.
• Documenting detailed evidence, findings, and create a report output.
• Meeting with clients during the planning, information sharing, and technical support stages.
• Creating and delivering proactive projects to clients including tabletop exercises, plan coaching, assessments.
• Conducting regular calls with clients to consult on incident response programs.
• Continue education by researching and investigating developments in cyber forensics/attack methodologies; increase existing skillset to handle these matters.
• Attending and participating in regular internal meetings.
• Participating in on-call rotation, providing timely and effective support to clients, ensuring adherence to service level agreements (SLAs) and resolving issues within established response and resolution times.
• Performing periodic after-hours and weekends on-call work.

Skills

Information security

Active Directory

Systems Administration

Exchange Administration

M365 / Cloud environments

Threat hunting

Incident handling

EDR

SIEM

Firewalls & networking

Data analysis

Microsoft Office Suite

Tools

Microsoft Office Suite

Job description

FRSecure, LLC in the United States seeks a DFIR Analyst to support clients during cyber incidents, conducting high-quality investigations and advising on remediation. You will lead proactive projects like tabletop exercises and plan coaching while handling triage and case work.

The role involves remote work with some on-site as needed, with a strong emphasis on incident response, client communication, and continuous learning in cyber forensics and attack methodologies.