Remote DFIR Analyst: Incident Response & Forensics Lead

Frsecure Llc; Yuma (AZ); Remote; USD 95,000 - 125,000; Full time

Benefits offered by this job

Flexible work environment

Remote or hybrid options

Mental health & wellbeing support

Growth & development

Comprehensive benefits

401(k) with employer match

Unlimited PTO + parental leave

Job summary

FRSecure, LLC is seeking a DFIR Analyst to join our US-based team in a fully remote role. You will conduct forensic reviews, threat hunting, incident handling, and client-focused analysis to identify and contain breaches, and you will deliver detailed reports and guidance.

Ideal candidates have 3–5 years in information security, experience with AD, M365, SIEM/EDR, and strong communication skills to translate complex concepts to diverse audiences while delivering superior client service.

Qualifications

• 3–5 years of information security experience.
• Experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• GCIH, GCFA, ECIH certifications preferred.
• Prior experience in threat hunting and/or incident handling.
• Experience with EDR and SIEM technologies.
• Experience with firewalls and network devices.
• Ability to clearly convey complex information to diverse audiences and provide effective solutions.
• Proven customer service skills with a client-focused mindset.

Responsibilities

• Perform forensic reviews of client systems to identify IOCs and contain threats.
• Conduct triage, threat hunting, and case management for incident response clients.
• Document detailed evidence, findings, and generate reports for clients.
• Engage with clients during planning, information sharing, and technical support stages.
• Develop proactive projects including tabletop exercises and plan coaching.
• Participate in on-call rotation and ensure SLAs are met.

Skills

Information security experience

Analytical skills

Communication skills

Customer service mindset

Threat hunting

Incident handling

Ability to explain technical topics

Education

GCIH

GCFA

ECIH

Tools

Active Directory

Systems Administration

Exchange Administration

M365

EDR

SIEM

Firewalls

Job description

FRSecure, LLC is seeking a DFIR Analyst to join our US-based team in a fully remote role. You will conduct forensic reviews, threat hunting, incident handling, and client-focused analysis to identify and contain breaches, and you will deliver detailed reports and guidance.

Ideal candidates have 3–5 years in information security, experience with AD, M365, SIEM/EDR, and strong communication skills to translate complex concepts to diverse audiences while delivering superior client service.