IT Security Analyst I (Evening Shift)

VC3; Montreal; Remote; CAD 70,000 - 95,000; Full time

Job summary

VC3, Inc. in Canada is seeking a security incident response professional to monitor events, triage tickets, and investigate potential threats to meet client SLAs.

You will translate cyber security concepts for clients, analyze logs using SIEM/EDR tools, and deliver concise reports to teammates and management.

The role requires availability 4pm–1am EST and will be conducted remotely with CJIS background checks post-employment.

Qualifications

• Two years of work experience in information security or related fields.
• Experience with SIEM platforms, firewall management, and endpoint detection and response tools.
• One year or more of experience with EDR solutions and vulnerability management.
• Certifications such as CompTIA Security+, CySA+, CCNA, C|EH, SSCP or equivalent preferred.

Responsibilities

• Translate cybersecurity concepts into non-technical terms for clients.
• Manage security event monitoring and incident response ticket queues to meet SLAs/ objectives.
• Convey indicators of compromise, isolation, and remediation steps clearly.
• Analyze system and application logs to diagnose faults and spot anomalies.
• Utilize End Detection and Response tools to investigate alerts and build threat timelines.
• Follow procedures to investigate, escalate, contain, or eradicate malicious activity.
• Develop and deliver written and oral reports to clients and management.
• Provide input to improve internal processes and participate in threat hunting and special projects.

Skills

InfoSec experience

SIEM experience

EDR experience

Firewall management

Security certifications

Tools

EDR tools

SIEM platforms

Endpoint security tooling

Job description

Description

At VC3, we don’t just solve IT problems — we own them. We serve hundreds of municipalities and organizations across the United States and Canada, bringing IT to the people who need it most. We believe in earning trust, having a growth mindset, and delivering excellence every single time.

Department

Infrastructure & Security

Location

Canada - Remote

The Impact you will have

You will be responsible for managing security event monitoring and incident response ticket queues, ensuring timely and effective triage in line with service level agreements and objectives. You will understand and follow the VC3 way, a set of standards and processes that produce a predictable result for the client, utilizing End Detection and Response tools to investigate alerts and build accurate timelines of potential threats.

Candidates must be available 4pm - 1am EST for this role.

What you will be doing

• Translate Cyber Security concepts into non-technical terms for clients to clearly understand specific applications to their business priorities.


• Manage the security event monitoring and incident response ticket queues and triage as appropriate to meet the established service level agreements/objectives


• Clearly convey indicators of compromise, isolation, and remediation steps


• Analyze and interpret system, security, and application logs in order to diagnose faults, spot abnormal behavior, and rule out false positives


• Effectively utilize VC3 and client toolsets include, but not limited to, End Detection and Response tools to investigate alerts, anomalies and build accurate timelines related to possible compromise


• Follow established procedures to investigate, escalation, contain, or eradicate malicious activity


• Develop and deliver written and oral reports to clients, teammates, and management to aggregate and communicate security information and metrics


• Provide input and recommendations to improve internal processes and procedures


• Participate in threat hunting activities and other special projects as required


• Additional duties as required


• Role is scheduled for 4pm - 1am EST

The tools you bring

• Two years’ work experience in the Information Security or related fields


• One of the following certifications preferred: CompTIA Security+, CompITA CySA+, CCNA, C|EH, SSCP, or equivalent


• Experience with SIEM platforms, firewall management, and endpoint detection and response platforms


• One year or more of experience with EDR solutions, ESGs, vulnerability management and content filtering


• Go Beyond – you take that extra step to create moments that are unexpected but appreciated.


• Own It - You have the courage to do what's right, the resolve to take responsibility, and the grit to cross the finish line.


• Be Curious - You challenge the status quo and aim for continuous improvement and constant learning.


• Serve as One - You believe that together, we are greater than the sum of our individuals, and that teamwork is essential to success.

What's in it for you

• Flexibility- We’re remote-first, but not remote-only. Some roles include an onsite component, depending on team needs. We aim to give you the flexibility to do your best work, plus company-paid time off to help you thrive in work and in life.


• Well-being & Support - Caring for our team goes beyond the workday. We offer a range of benefits to support your overall well-being, from mental health and leave support through our Employee and Family Assistance Program, to financial wellness through company-matched 401(k)/RRSP plans. Whether it’s today’s needs or tomorrow’s goals, we’ve got you covered.


• Grow with Us – Whether you’re just getting started or ready to take the next step, we are committed to investing in your growth. We offer structured development through our Leadership Academy, monthly learning sessions, mentorship programs, learning reimbursements, internal career fairs, job shadowing, and personalized career-pathing to support internal mobility.


• People-First Culture – We live our values, support each other, and create a space where everyone belongs. We have a common goal of doing work that matters, with autonomy, recognition, and a mission to serve those who serve.


• Transparent Leadership – From open communication to clear company goals, our leaders are involved, and our managers are here to support your growth every step of the way.

Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment