{"id":2742825,"url":"https://alion.io/job/frsecure-digitial-forensics-and-incident-response-dfir-analyst","title":"Digitial Forensics and Incident Response (DFIR) Analyst","company":{"id":2147886,"name":"FRSecure","domain":"frsecure.com","url":"https://alion.io/company/frsecure","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Edina, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":95000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":true},{"name":"Microsoft Office","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-16T16:37:40Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-22T17:43:19Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Description\nWhy choose FRSecure? We believe information security is fun. We focus on equipping our clients, communities, and employees with knowledge to better protect themselves against risk. Our first core value, we tell the truth, sets a foundation for meaningful relationships and employee growth, ultimately providing the highest quality work in the industry. FRSecure is consistently awarded for outstanding service, industry-leading methodology, organizational growth, and a reputable culture.\nFRSecure is comprised of experts on a mission to fix the broken information security industry. We believe that behind every data compromise are people, and everyone deserves to have their data and livelihood protected. We take great pride in what we do and how we do it, and we truly believe we can accomplish our mission. It starts with hiring the right people to help us get there. If this resonates with you, apply now to join our dedicated team!\nBenefits and Work Environment: FRSecure is committed to creating a workplace where people can do their best work while staying balanced, supported, and fulfilled. Our culture is rooted in our mission and values, and we believe that flexibility, trust, and wellbeing are essential to long-term success. Here is what you can expect:\nFlexible Work Environment: We empower employees with flexible schedules and remote or hybrid work options.\nMeaningful, Mission-Driven Work: Join a team that is passionate about making a real impact, with opportunities to contribute in a collaborative, values-driven environment.\n Mental Health & Wellbeing Support: Access to an Employee Assistance Program (EAP) and a culture that actively promotes mental wellbeing, open communication, and sustainable work practices.\nGrowth & Development: Ongoing learning opportunities and support for professional development to help you grow in your career.\n Comprehensive Benefits Package: Including medical, dental and vision insurance, health savings, flexible savings and dependent care savings account options, life and disability insurance, 401(k) with employer match up to 4%, and pet insurance.\n Generous Time Off: Unlimited paid time off offered to rest and recharge, paid parental leave (6 weeks of 100% regular, straight time weekly pay for non-birthing parents, and 12 weeks of 100% regular, straight time weekly pay for birthing parents), 11 paid holidays, and volunteer time off.\nPosition Summary: The Digitial Forensics and Incident Response (DFIR) Analyst is responsible for providing support to clients when they have become or suspect they may be the victim of a cyber-attack. This is done by conducting high quality and timely incident response investigations in environments of varying security maturity including identification and containment phases and advising clients regarding recovery and remediation steps to assist them in returning to normal business operations. Our DFIR Analysts have a blend of proactive project responsibilities, such as leading tabletops and plan coaching, as well as triage and case work.\nWorking Location: This position is available on a full-time remote basis in the following states only: Arizona, Colorado, Florida, Georgia, Idaho, Illinois, Kansas, Kentucky, Massachusetts, Michigan, Minnesota, Montana, North Carolina, Ohio, Pennsylvania, South Dakota, Tennessee, Texas, Washington, and Wisconsin. Candidates based in Minnesota are preferred but not required. Only candidates located in the United States will be considered. Office headquarters and operational business hours are based in Edina, MN (Central Time).\nApplication Deadline: November 6, 2026\nWhat Your Day Looks Like as an DFIR Analyst:\nPerforming a forensic review of client systems for artifacts and indicators of compromise (IOCs) to further identify, contain, and eradicate malware and/or malicious intruders\nConducting triage, threat-hunting, and case management for incident response clients\nDocumenting detailed evidence, findings, and create a report output\nMeeting with clients during the planning, information sharing, and technical support stages\nCreating and delivering proactive projects to clients including tabletop exercises, plan coaching, assessments\nConducting regular calls with clients to consult on incident response programs\nContinue education by researching and investigating developments in cyber forensics/attack methodologies; increase existing skillset to handle these matters\nAttending and participating in regular internal meetings\nParticipating in on-call rotation, providing timely and effective support to clients, ensuring adherence to service level agreements (SLAs) and resolving issues within established response and resolution times\nPerforming periodic after-hours and weekends on-call work\nWorking Hours: Standard working hours for this position are between 8:00am-5:00pm in the time zone in which the employee is based, with the expectation that there may be client calls, project/task responsibilities, meetings, or other company obligations in which the employee will need to work outside of these hours, as standard business hours are 8:00am-5:00pm Central Time.\nThis position also includes on-call responsibilities. On-call duty will be 1 week in duration with the on-call assignment being dependent upon the number of Analysts on the team. During the on-call rotation, the employee will be required to monitor an email inbox for incoming CSIRT requests as well as answer incoming calls to the CSIRT after-hours hotline and perform incident triage duties.\nTravel: There is minimal travel associated with this position, typically less than 5-10%. Occasional travel includes conferences or on-site client projects as needed, as well as any team or company activities.\nRequirements\nWhat You Bring to the DFIR Analyst:\n3-5 years of information security experience\n3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments\n3-5 years of experience in presenting information security concepts\nGCIH, GCFA, ECIH certifications preferred\nPrior experience in threat hunting and/or incident handling\nPrior experience in management of EDR and/or SIEM technologies\nExperience with firewalls and network devices best practices and logging\nSolid understanding of computer systems administration in large environments\nDemonstrated analytical skills to interpret data, identify trends, and ensure accuracy in all deliverables\nAbility to clearly convey complex information to diverse audiences and actively listen to understand needs and provide effective solutions\nProven customer service skills with a customer-focused mindset, including the ability to build relationships, resolve issues effectively, and deliver a positive, responsive client experience\nAbility to communicate highly technical topics to non-technical people effectively\nAbility to handle and work with large amounts of data\nProficient with all Microsoft Office Suite products\nSalary: FRSecure believes in and operates with equitable hiring practices. The starting salary range for this position is between $95,000-125,000, not including any bonus, incentive commission, or benefits. The range displayed on each job posting reflects the defined salary range for the position across the United States. Within the range, pay offered is determined by a variety of factors that include but are not limited to job-related skills, experience, and relevant education or training.\nCommission eligible: No\nFLSA Status: Exempt / Non-Exempt (based on hiring state)\nYour Recruiter will be able to discuss further details related to commission, bonuses, or other specific salary information related to this position.\nFormer and Current Employees: To qualify for this position, former employees must be eligible for rehire, and current employees must be in good standing.\nVirtual Interview Participation Policy:\nAs part of FRSecure's commitment to transparency, trust, and meaningful human connection, candidates participating in virtual interviews are expected to join with their camera enabled. Visual engagement supports clearer communication, encourages active participation, and helps create a more inclusive and interactive interview experience for both candidates and our hiring team. We understand that there may be situations where camera use is not feasible due to technical, accessibility, bandwidth, or environmental factors. Candidates who anticipate challenges with video participation should notify their Recruiter or hiring contact before the interview so that reasonable accommodations can be considered.\nFRSecure is committed to providing an inclusive hiring process and will work with candidates to address accommodation needs whenever possible.\nEmployment and Application Statements\nFRSecure, LLC is committed to the principles of equal employment. We comply with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations. It is our intent to maintain a work environment that is free of harassment, discrimination, or retaliation because of race, color, creed, religion, national origin, sex, sexual orientation (including transgender status, gender identity or expression), pregnancy (including childbirth, lactation, or related conditions), marital status, disability, public assistance, age, and familial status, genetic information, local commissions activity, veteran status, uniformed servicemember status, or any other status protected by federal, state, or local laws.\nFRSecure is dedicated to the fulfillment of this policy in regard to all aspects of employment, including but not limited to recruiting, hiring, placement, transfer, training, promotion, rates of pay, and other compensation, termination, and all other terms, conditions, and privileges of employment.\nFRSecure is committed to the full inclusion of all qualified individuals. As part of this commitment, FRSecure will ensure that persons with disabilities are provided reasonable accommodations for the hiring process. If a reasonable accommodation is needed to complete a job application, interview, or otherwise participate in the hiring process, please contact the Human Resources team at .","description_format":"text","description_chars":10265,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work","Parental leave","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-16T21:25:47Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":25,"reasons":["conf:2","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/frsecure-digitial-forensics-and-incident-response-dfir-analyst","json_url":"https://alion.io/job/frsecure-digitial-forensics-and-incident-response-dfir-analyst.json","meta":{"generated_at":"2026-10-22T21:00:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5372,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2147886},"rest":"https://alion.io/mcp/rest/get_company?id=2147886"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffrsecure-digitial-forensics-and-incident-response-dfir-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffrsecure-digitial-forensics-and-incident-response-dfir-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffrsecure-digitial-forensics-and-incident-response-dfir-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/frsecure-digitial-forensics-and-incident-response-dfir-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffrsecure-digitial-forensics-and-incident-response-dfir-analyst"}]}