Remote DFIR Analyst — Incident Response & Forensics

Frsecure Llc; Sioux Falls (SD); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work options

Growth & development

Comprehensive benefits package

Generous time off

401(k) with employer match

Pet insurance

Job summary

FRSecure is seeking a DFIR Analyst to support clients in cyber-attack investigations and incident response across varied environments. You will conduct high-quality investigations, triage, and remediation planning while leading tabletop exercises and coaching teams.

This full-time role offers remote work options within the United States, with a standard 8:00am–5:00pm schedule and on-call rotations. Candidates with 3–5 years of information security experience and relevant certifications are

Qualifications

• 3–5 years information security experience.
• Experience with Active Directory, systems administration, Exchange administration or cloud environments (M365).
• Experience in threat hunting and incident handling.
• Prior experience with EDR and SIEM technologies; knowledge of firewalls and network devices.
• Ability to communicate technical topics to diverse audiences and deliver client-focused support.

Responsibilities

• Perform forensic/incident response tasks including IOC identification and containment guidance.
• Lead triage, threat-hunting, and case management for incident response clients.
• Document evidence, findings, and produce client reports.
• Meet with clients during planning, information sharing, and technical support stages.
• Create and deliver proactive projects (tabletop exercises, plan coaching, assessments).
• Conduct regular client calls to advise on incident response programs.
• Continuously study developments in cyber forensics/attack methods and expand skills.
• Attend internal meetings and participate in on-call rotation with SLA adherence.
• Perform periodic after-hours and weekend on-call work.

Skills

Information security

Active Directory

Systems administration

M365 / cloud environments

Threat hunting

Incident handling

EDR / SIEM

Firewalls / network devices

Technical communication

Data analysis

Education

GCIH/GCFA/ECIH certifications preferred

Tools

Microsoft Office Suite

Job description

FRSecure is seeking a DFIR Analyst to support clients in cyber-attack investigations and incident response across varied environments. You will conduct high-quality investigations, triage, and remediation planning while leading tabletop exercises and coaching teams.

This full-time role offers remote work options within the United States, with a standard 8:00am–5:00pm schedule and on-call rotations. Candidates with 3–5 years of information security experience and relevant certifications are