Digitial Forensics and Incident Response (DFIR) Analyst

FRSecure•Edina, MN

10h•$95,000 - $125,000•Remote

About The Position

The Digital Forensics and Incident Response (DFIR) Analyst supports clients who have experienced or suspect they may have experienced a cyberattack. The analyst conducts timely, high-quality incident response investigations across environments with varying levels of security maturity, including identification and containment, and advises clients on recovery and remediation to help restore normal business operations. The role combines incident-response triage and casework with proactive client projects, including tabletop exercises and plan coaching. This is a full-time remote position available only to candidates located in specified U.S. states: Arizona, Colorado, Florida, Georgia, Idaho, Illinois, Kansas, Kentucky, Massachusetts, Michigan, Minnesota, Montana, North Carolina, Ohio, Pennsylvania, South Dakota, Tennessee, Texas, Washington, and Wisconsin. Minnesota-based candidates are preferred but not required. The company is headquartered in Edina, Minnesota, and operational business hours are based on Central Time. Travel is minimal, typically less than 5–10%, and may include conferences, on-site client projects, and team or company activities. Standard working hours are 8:00 a.m.–5:00 p.m. in the employee’s time zone, with occasional work outside those hours to support client calls, projects, meetings, or other company obligations. The position includes a one-week on-call rotation, scheduled according to team size. During on-call duty, the analyst monitors an inbox for CSIRT requests, answers the after-hours hotline, and performs incident triage. Periodic after-hours and weekend work is expected. The listed starting salary range is $95,000–$125,000, excluding bonuses, incentive commission, and benefits. The position is not commission eligible. FLSA status depends on the hiring state.

Requirements

3–5 years of information security experience.
3–5 years of experience with Active Directory, systems administration, Exchange administration, M365, and/or other cloud environments.
3–5 years of experience presenting information security concepts.
Prior experience in threat hunting and/or incident handling.
Prior experience managing EDR and/or SIEM technologies.
Experience with firewall and network-device best practices and logging.
Solid understanding of computer systems administration in large environments.
Demonstrated analytical skills, including interpreting data, identifying trends, and ensuring accuracy in deliverables.
Ability to communicate complex information clearly to diverse audiences, listen actively, understand needs, and provide effective solutions.
Customer-service skills and a customer-focused mindset, including relationship building, effective issue resolution, and responsive client service.
Ability to communicate highly technical topics effectively to non-technical audiences.
Ability to handle and work with large amounts of data.
Proficiency with all Microsoft Office Suite products.

Nice To Haves

GCIH, GCFA, or ECIH certification.
Minnesota-based location is preferred but not required.

Responsibilities

Review client systems for forensic artifacts and indicators of compromise to identify, contain, and eradicate malware or malicious intruders.
Conduct triage, threat hunting, and case management for incident-response clients.
Document evidence and findings and produce reports.
Meet with clients during planning, information sharing, and technical-support stages.
Create and deliver proactive client projects, including tabletop exercises, plan coaching, and assessments.
Conduct regular client calls to consult on incident-response programs.
Research developments in cyber forensics and attack methodologies and continue developing relevant skills.
Attend and participate in regular internal meetings.
Participate in the on-call rotation, monitor incoming CSIRT requests, answer after-hours hotline calls, and perform incident triage while meeting service-level agreements and response and resolution times.
Perform periodic after-hours and weekend on-call work.

Benefits

Flexible schedules and remote or hybrid work options.
Employee Assistance Program and mental wellbeing support.
Ongoing learning opportunities and professional development support.
Medical, dental, and vision insurance.
Health savings, flexible savings, and dependent care savings account options.
Life and disability insurance.
401(k) with employer match up to 4%.
Pet insurance.
Unlimited paid time off.
Paid parental leave: 6 weeks of full regular straight-time weekly pay for non-birthing parents and 12 weeks for birthing parents.
11 paid holidays.
Volunteer time off.