IT Security Analyst II

This is a fully remote position, open to applicants in Canada.

📋 Description

• Adhere to the standards and processes outlined in “The VC3 Way.”

• Convert intricate cybersecurity concepts into practical insights for clients.

• Manage and prioritize the monitoring of security events and incident response queues.

• Formulate strategies to enhance incident response efficiency and reduce resolution times.

• Examine system, security, and application logs to identify faults and unusual behaviors.

• Utilize advanced tools and techniques for threat detection and analysis.

• Optimize and employ VC3 and client toolsets, such as EDR tools, to investigate alerts and potential threats.

• Research, escalate, contain, and eliminate sophisticated malicious activities.

• Create and deliver written and oral reports on security trends, metrics, and recommendations.

• Suggest enhancements to internal processes, procedures, and security practices.

• Spearhead threat hunting activities and manage special projects.

• Promote the adoption of innovative security solutions and methodologies.

• Collaborate with stakeholders regarding technology, practices, and business changes that affect security.

• Facilitate cross-departmental initiatives aimed at improving client security and mitigating threats.

• Maintain thorough documentation for security operations, threat analysis, and incident management.

• Communicate findings and changes effectively to clients and internal teams.

• Mentor members of the Security Analyst I team.

• Lead efforts to escalate complex security issues.

• Engage in team huddles, L10 meetings, company meetings, ticket reviews, and on-call rotations.

• Undertake additional responsibilities as needed.

⛳️ Requirements

• A minimum of five years of experience in information security, risk management, or related fields.

• Preferred certifications include CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent.

• Highly desirable certifications include CISSP, CEH, CISM, CISA, or CRISC.

• Practical knowledge of Firewalls, IDS/IPS, SIEM, Identity and Access Management (IAM), remote working solutions, and cloud technologies.

• Understanding of current and emerging threats, countermeasures, and organizational challenges.

• Familiarity with information security management frameworks and industry regulations, including NIST, ISO 27001, and GDPR.

• Strong skills in problem-solving and decision-making.

• Exceptional verbal and written communication abilities.

• Capability to present complex technical issues in a clear and straightforward manner.

• Self-motivated, detail-oriented, highly organized, and adept at managing diverse responsibilities efficiently.

• Ability to adapt and succeed in ambiguous or uncertain situations.

🏝️ Benefits

• Minimal travel required.

• VC3 provides a comprehensive benefits package.

• 401K/RRSP company matching available.

• Opportunities for career growth and advancement.

• Hands-on experiences along with formal development programs.

• A dynamic learning environment focused on continuous learning.