Remote DFIR Analyst: Incident Response & Threat Hunting

Frsecure Llc; Atlanta (GA); Remote; USD 95,000 - 125,000; Full time

Job summary

FRSecure, LLC is seeking a DFIR Analyst to provide high-quality incident response investigations for clients across varying security maturities. The role includes proactive project work, triage, and client collaboration, with on-call rotations and after-hours support as part of standard duties.

The position supports remote work within the United States, with headquarters in MN. Ideal candidates have 3–5 years in information security and relevant certifications (GCIH/GCFA/ECIH).

Qualifications

• 3–5 years of information security experience.
• 3–5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments.
• 3–5 years of experience in presenting information security concepts.
• GCIH, GCFA, ECIH certifications preferred.

Responsibilities

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs).
• Conducting triage, threat-hunting, and case management for incident response clients.
• Documenting detailed evidence, findings, and create a report output.
• Meeting with clients during planning, information sharing, and technical support stages.
• Creating and delivering proactive projects to clients including tabletop exercises and plan coaching.
• Attending regular internal meetings and on-call rotation to support clients.

Skills

Information security

Threat hunting

Incident handling

Analytical skills

Customer service

Education

GCFA

GCIH

ECIH

Tools

EDR

SIEM

Microsoft Office

Job description

FRSecure, LLC is seeking a DFIR Analyst to provide high-quality incident response investigations for clients across varying security maturities. The role includes proactive project work, triage, and client collaboration, with on-call rotations and after-hours support as part of standard duties.

The position supports remote work within the United States, with headquarters in MN. Ideal candidates have 3–5 years in information security and relevant certifications (GCIH/GCFA/ECIH).