[Hiring] Incident Response (DFIR) Case Manager @FRSecure

Role Description

The Incident Response (DFIR) Case Manager is responsible for providing support to clients when they have become or suspect they may be the victim of a cyber-attack. This is done by conducting high quality and timely incident response investigations in environments of varying security maturity including identification and containment phases and advising clients regarding recovery and remediation steps to assist them in returning to normal business operations. Our Incident Response Case Managers have a blend of proactive project responsibilities, such as leading tabletops and plan coaching, as well as triage and case work.

What Your Day Looks Like as an Incident Response (DFIR) Case Manager

• Performing a forensic review of client systems for artifacts and indicators of compromise (IOCs) to further identify, contain, and eradicate malware and/or malicious intruders
• Conducting triage, threat-hunting, and case management for incident response clients
• Documenting detailed evidence, findings, and creating a report output
• Meeting with clients during the planning, information sharing, and technical support stages
• Creating and delivering proactive projects to clients including tabletop exercises, plan coaching, assessments
• Conducting regular calls with clients to consult on incident response programs
• Continuing education by researching and investigating developments in cyber forensics/attack methodologies; increasing existing skillset to handle these matters
• Attending and participating in regular internal meetings
• Participating in on-call rotation, providing timely and effective support to clients, ensuring adherence to service level agreements (SLAs) and resolving issues within established response and resolution times
• Performing periodic after-hours and weekends on-call work

Working Location

This position is available on a full-time remote basis in the following states:

• Arizona
• Colorado
• Florida
• Georgia
• Idaho
• Illinois
• Kansas
• Kentucky
• Massachusetts
• Michigan
• Minnesota
• Montana
• North Carolina
• Ohio
• Pennsylvania
• South Dakota
• Tennessee
• Texas
• Washington
• Wisconsin

Only candidates located in the United States will be considered. Office headquarters and operational business hours are based in Edina, MN (Central Time).

Requirements

• 3-5 years of information security experience
• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments
• 3-5 years of experience in presenting information security concepts
• GCIH, GCFA, ECIH certifications preferred
• Prior experience in threat hunting and/or incident handling
• Prior experience in management of EDR and/or SIEM technologies
• Experience with firewalls and network devices best practices and logging
• Solid understanding of computer systems administration in large environments
• Demonstrated analytical skills to interpret data, identify trends, and ensure accuracy in all deliverables
• Ability to clearly convey complex information to diverse audiences and actively listen to understand needs and provide effective solutions
• Proven customer service skills with a customer-focused mindset, including the ability to build relationships, resolve issues effectively, and deliver a positive, responsive client experience
• Ability to communicate highly technical topics to non-technical people effectively
• Ability to handle and work with large amounts of data
• Proficient with all Microsoft Office Suite products

Salary

FRSecure believes in and operates with equitable hiring practices. The starting salary range is $85,000-116,000, not including any bonus, incentive commission, or benefits. The range displayed on each job posting reflects the defined starting salary range for the position across the United States. Within the range, pay offered is determined by a variety of factors that include but are not limited to job-related skills, experience, and relevant education or training.

Employment and Application Statements

FRSecure, LLC is committed to the principles of equal employment. We comply with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations. It is our intent to maintain a work environment that is free of harassment, discrimination, or retaliation because of race, color, creed, religion, national origin, sex, sexual orientation (including transgender status, gender identity or expression), pregnancy (including childbirth, lactation, or related conditions), marital status, disability, public assistance, age, and familial status, genetic information, local commissions activity, veteran status, uniformed servicemember status, or any other status protected by federal, state, or local laws.

FRSecure is dedicated to the fulfillment of this policy in regard to all aspects of employment, including but not limited to recruiting, hiring, placement, transfer, training, promotion, rates of pay, and other compensation, termination, and all other terms, conditions, and privileges of employment.

FRSecure is committed to the full inclusion of all qualified individuals. As part of this commitment, FRSecure will ensure that persons with disabilities are provided reasonable accommodations for the hiring process. If a reasonable accommodation is needed to complete a job application, interview, or otherwise participate in the hiring process, please contact the Human Resources team at [email protected].