Note: The job is a remote job and is open to candidates in USA. VC3 provides managed IT and technology services to municipalities and organizations across the United States and Canada. The IT Security Analyst I will manage security event monitoring and incident response queues, investigate alerts using endpoint detection and response tools, and triage potential threats in accordance with service level objectives. The role also communicates security findings, supports threat hunting, and recommends process improvements.
Responsibilities
- Translate Cyber Security concepts into non-technical terms for clients to clearly understand specific applications to their business priorities
- Manage the security event monitoring and incident response ticket queues and triage as appropriate to meet the established service level agreements/objectives
- Clearly convey indicators of compromise, isolation, and remediation steps
- Analyze and interpret system, security, and application logs in order to diagnose faults, spot abnormal behavior, and rule out false positives
- Effectively utilize VC3 and client toolsets include, but not limited to, End Detection and Response tools to investigate alerts, anomalies and build accurate timelines related to possible compromise
- Follow established procedures to investigate, escalate, contain, or eradicate malicious activity
- Develop and deliver written and oral reports to clients, teammates, and management to aggregate and communicate security information and metrics
- Provide input and recommendations to improve internal processes and procedures
- Participate in threat hunting activities and other special projects as required
- Additional duties as required
- Role is scheduled for 8-5pm EST
Skills
- • Two years' work experience in the Information Security or related fields
- • Experience with SIEM platforms, firewall management, and endpoint detection and response platforms
- • One year or more of experience with EDR solutions, ESGs, vulnerability management and content filtering
- • Role is scheduled for 8-5pm EST
- • One of the following certifications preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent
Benefits
- Fully remote work arrangement
- Company-paid time off
- Employee and Family Assistance Program, including mental health and leave support
- Company-matched 401(k)/RRSP plans
- Leadership Academy
- Monthly learning sessions
- Mentorship programs
- Learning reimbursements
- Internal career fairs
- Job shadowing
- Personalized career-pathing to support internal mobility
- Autonomy and recognition
- Open communication and supportive managers
Company Overview