Remote DFIR Analyst: Incident Response & Forensics Expert

Frsecure Llc; Springfield (IL); Remote; USD 95,000 - 125,000; Full time

Job summary

FRSecure is seeking a DFIR Analyst to provide expert incident response and forensic investigations for diverse clients. You will identify artifacts, triage incidents, and guide remediation steps, while coaching clients on improving their DFIR capabilities.

The role emphasizes proactive projects, tabletop exercises, and regular client communication to ensure rapid containment and recovery. Remote work is possible in supported states."

Qualifications

• 3–5 years of information security experience.
• Experience with Active Directory, Systems Administration, Exchange Administration, and cloud environments (M365).
• Strong analytical and communication skills.
• GCIH, GCFA, ECIH certifications preferred.

Responsibilities

• Perform forensic reviews of client systems to identify artifacts and IOCs.
• Conduct triage, threat-hunting, and incident response case management.
• Document evidence, findings, and generate client reports.
• Engage with clients during planning and information-sharing sessions.
• Create and deliver proactive projects like tabletop exercises and plan coaching.
• Communicate with clients regularly to improve incident response programs.
• Stay current on cyber forensics and attack methodologies.

Skills

Analytical skills

Communication

Customer service

Threat hunting

Education

GCIH

GCFA

ECIH

Tools

Active Directory

Systems Administration

Exchange Administration

Microsoft 365 / M365

Job description

FRSecure is seeking a DFIR Analyst to provide expert incident response and forensic investigations for diverse clients. You will identify artifacts, triage incidents, and guide remediation steps, while coaching clients on improving their DFIR capabilities.

The role emphasizes proactive projects, tabletop exercises, and regular client communication to ensure rapid containment and recovery. Remote work is possible in supported states."