Remote DFIR Analyst - Incident Response & Forensics Expert

Frsecure Llc; Illinois; Remote; USD 95,000 - 125,000; Full time

Job summary

FRSecure is seeking a DFIR Analyst to provide incident response support for clients across the US. You will investigate cyber incidents, identify IOCs, and guide remediation while contributing to proactive projects and client coaching.

Applicants should have 3–5 years in information security, with GCFA/GCIH/ECIH preferred, and experience with EDR/SIEM, firewalls, and large-scale data analysis. Remote work options are available.

Qualifications

• 3–5 years of information security experience.
• GCFA, GCIH, ECIH certifications preferred.
• Experience in threat hunting and incident handling.
• Experience with EDR, SIEM, firewalls, and network devices.

Responsibilities

• Perform forensic reviews to identify IOCs and malware.
• Lead triage, threat-hunting, and incident case management.
• Document evidence, findings, and output reports.
• Meet with clients during planning and support stages.
• Create proactive projects like tabletop exercises and plan coaching.
• Participate in on-call rotation and ensure SLA adherence.

Skills

Threat hunting

Incident handling

EDR/SIEM

Communication

Customer service

Microsoft Office

Firewalls & networks

Data analysis

Tools

EDR

SIEM

Active Directory

Cloud environments

Job description

FRSecure is seeking a DFIR Analyst to provide incident response support for clients across the US. You will investigate cyber incidents, identify IOCs, and guide remediation while contributing to proactive projects and client coaching.

Applicants should have 3–5 years in information security, with GCFA/GCIH/ECIH preferred, and experience with EDR/SIEM, firewalls, and large-scale data analysis. Remote work options are available.