IT Security Analyst II

This is a fully remote position, open to applicants in United States.

📋 Description

• Adhere to “The VC3 Way,” which includes standards and processes that ensure predictable outcomes for clients.

• Convert intricate cybersecurity concepts into actionable insights for clients that align with their business priorities.

• Manage and prioritize security event monitoring and incident response tasks to meet or exceed service level agreements (SLAs) and objectives.

• Formulate strategies to enhance incident response and reduce resolution times.

• Examine system, security, and application logs to troubleshoot issues, identify unusual behaviors, and minimize false positives.

• Utilize advanced tools and techniques for detecting and analyzing threats.

• Employ and optimize VC3 and client toolsets, including advanced Endpoint Detection and Response (EDR) tools, to investigate alerts and anomalies and construct compromise timelines.

• Investigate, escalate, contain, and eliminate advanced malicious activities.

• Create, deliver, and present written and verbal reports on security trends, metrics, and strategic recommendations.

• Suggest enhancements to internal processes, procedures, and security practices.

• Lead threat hunting initiatives and manage special projects.

• Champion the adoption of innovative security solutions and methodologies.

• Collaborate with internal stakeholders on technological, procedural, and business changes that impact security.

• Facilitate initiatives across departments to enhance client security and reduce threats.

• Maintain documentation related to security operations, threat analysis, and incident management.

• Relay changes and findings clearly and promptly to clients and internal teams.

• Mentor and support Security Analyst I team members.

• Take ownership of complex security issues and spearhead escalation efforts.

• Engage in team huddles, L10 meetings, company meetings, and other structured gatherings.

• Review tickets in collaboration with the manager.

• Participate in the on-call rotation, approximately once every 1.5–2 months.

• Undertake additional responsibilities as needed.

⛳️ Requirements

• A minimum of five years of experience in information security, risk management, or related areas.

• At least one of the following certifications is preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent.

• Advanced certifications such as CISSP, CEH, CISM, CISA, or CRISC are highly preferred.

• Practical knowledge of firewalls, IDS/IPS, SIEM, Identity and Access Management (IAM), remote work solutions, and cloud technologies.

• Familiarity with current and emerging threats, countermeasures, and the challenges organizations face in addressing these threats.

• Understanding of information security management frameworks and industry regulations, including NIST, ISO 27001, and GDPR.

• Strong problem-solving and decision-making skills, with the ability to analyze complex issues and devise effective solutions.

• Exceptional verbal and written communication abilities, capable of presenting complex technical topics in a clear and straightforward manner.

• Self-motivated, detail-oriented, highly organized, and adept at efficiently managing diverse tasks and responsibilities with a high standard of quality.

• Capability to adapt and excel in unpredictable or uncertain situations.

• Must fulfill Criminal Justice Information Systems (CJIS) requirements post-employment.

• The chosen applicant will undergo criminal and department of motor vehicles background checks.

🏝️ Benefits

• Minimal travel is required.

• VC3 provides a comprehensive benefits package.

• 401K/RRSP company matching is available.

• The selected applicant will be subject to criminal and department of motor vehicles background checks.

• The chosen applicant must comply with Criminal Justice Information Systems (CJIS) requirements post-employment.