Information Security Analyst II (Remote)

Vitu; United States; Presencial; USD 73.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare Coverage

Retirement Planning

Paid Time Off

ID Theft Insurance

Life and Disability Insurance

Tuition Reimbursement

Commuter Benefits

Descripción de la vacante

Vitu, a leader in Vehicle-to-Government (V2Gov) tech, seeks an Information Security Analyst II to monitor, analyze, and remediate security risks across our enterprise. You will work with incident response, vulnerability management, and cloud security teams to reduce risk and strengthen our security posture.

You will use CrowdStrike, Wiz, and other platforms to detect threats, validate mitigations, and drive remediation while collaborating with IT, cloud, and applications teams.

Formación

• Bachelor's degree in Cybersecurity, IT, CS or related field or equivalent certifications.
• 2-5 years of experience in Information Security, Cybersecurity Operations, Security Engineering, or Vulnerability Management.
• Experience supporting enterprise security operations in cloud-enabled environments and with security incidents/remediation.
• Hands-on with SIEM & Logging.
• Strong understanding of OSI model, TCP/IP, DNS, Firewalls, VPNs, and network architecture.
• Practical experience with modern EDR tools.

Responsabilidades

• Monitor and investigate security alerts from SIEM, EDR, cloud security, and threat tools.
• Analyze suspicious activities across endpoints, servers, cloud, and apps.
• Perform threat hunting with CrowdStrike Falcon and other platforms.
• Escalate incidents per IR procedures and document findings.
• Administer CrowdStrike Falcon security controls and policies.
• Investigate endpoint detections, malware alerts, and threat intel findings.
• Validate containment, eradication, and recovery actions.
• Assist with deployment and tuning of CrowdStrike capabilities (Falcon Sensor/ Secure/ Data Protection).
• Conduct vulnerability analysis using Wiz and scanners; prioritize remediation by risk.

Conocimientos

SIEM & Logging

EDR tools

Incident Response

Networking (OSI model, TCP/IP, DNS)

Cloud Security

Vulnerability Management

Azure/AWS/GCP Security Controls

Educación

Bachelor's degree in Cybersecurity/IT/CS

Herramientas

CrowdStrike Falcon

Wiz

SIEM Solutions

Microsoft Defender & Entra ID/AD

Azure/AWS/GCP security controls

Descripción del empleo

As the leading innovator in Vehicle-to-Government (V2Gov) technology, Vitu is transforming the way vehicles, businesses, government, and drivers interact with one another. Vitu provides innovative, cutting-edge services to the motor vehicle industry. Our namesake solution manages titling and registration transactions in all 50 states and across multiple locations — all on one platform. With the mission of expanding and automating Vehicle-to-Government (V2Gov) transactions, the Vitu platform is reimagining how drivers, businesses and governments interact with vehicles. Vitu has offices in California, Florida, Georgia, Illinois, Indiana, Kentucky, Minnesota, Montana, North Carolina, New Hampshire, New Jersey, New York, Ohio, Oregon, Pennsylvania, and Virginia.

The Information Security Analyst II is responsible for monitoring, analyzing, investigation, and remediation security risks across the enterprise environment. This role performs threat detection, vulnerability management, cloud security assessments, endpoint protection administration, incident response, and security control validation. The Analyst partners with IT Operations, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to reduce organizational risk and improve security posture. A primary focus is to leverage Crowestrike, Wis, and related security platforms to identify, investigate, prioritize, and drive remediation of security vulnerabilities, misconfiguration, and compliance gaps.

Key Responsibilities

Security Monitoring & Analysis

• Monitor and investigate security alerts generated by SIEM, EDR, cloud security, and threat detection tools.
• Analyze suspicious activities and indicators of compromise across endpoints, servers, cloud environments, and applications.
• Perform threat hunting activities using Crowdstrike Falcon and other security platforms
• Escalate confirmed incidents according to incident response procedures.
• Document findings, evidence, and recommendations.

Incident Response Support

• Administer and support CrowdStrike Falcon security controls and policies.
• Investigate endpoint detections, malware alerts, behavioral indicators, and threat intelligence findings.
• Analyze process executions, persistence mechanisms, lateral movement attempts, and suspicious endpoint activity.
• Validate containment, eradication, and recovery actions following security incidents.
• Assist with deployment, tuning, and optimization of CrowdStrike capabilities including: Falcon Sensor, Falcon Secure, and Falcon Data Protection where applicable

Vulnerability Management

• Conduct vulnerability analysis using Wiz, vulnerability scanners, and security assessment tools.
• Review vulnerability findings and determine risk severity and business impact.
• Prioritize remediation activities based on Exploitability, Asset Criticality, External exposure, Regulatory requirements, and/or Business Risk.
• Collaborate with infrastructure, cloud, application, and operations teams to track remediation activities.
• Validate remediation efforts and closure of security findings.
• Measure and report remediation performance metrics.

Access & Identity Support

• Assist with User Access reviews and identity/access management tasks.
• Monitor for unusual account activity or privilege escalation.

Compliance & Documentation

• Help maintain security policies, procedures, and documentation
• Support audits and compliance initiatives aligned with standards such as: ISO 27001, NIST Cybersecurity Framework, and SOC2

Security Awareness

• Support employee security awareness initiatives (e.g. phishing simulations, training, campaigns)
• Help track participation and effectiveness metrics.

Wiz Cloud Security Operations

• Monitor Wiz Findings across Multi-cloud environments.
• Investigate cloud misconfigurations, exposed assets, identity risks, vulnerable workloads, excessive privileges, data exposure risks.
• Analyze attack paths and toxic combinations
• Partner with cloud engineering teams to implement corrective actions
• Assist with Cloud Workload Protection Platform (CWPP)

Risk Management and Security Projects

• Assess technical risks and document mitigation plans.
• Support risk exception reviews and compensation control evaluations.
• Participate in security initiatives involving Identity and access mgmt, data loss prevention, endpoint security, vulnerability remediation, encryption and secure configuration.

Minimum Qualifications And Experience

• Bachelor's degree in Cybersecurity, IT, Computer Science or related, or equivalent training/certifications.
• 2-5 years of experience in Information Security, Cybersecurity Operations, Security Engineering, or Vulnerability Management.
• Experience supporting enterprise security operations, in a cloud-enabled environment as well as working with security incidents and remediation efforts.
• Hands on with SIEM & Logging.
• Strong understanding of Networking of OSI model, TCP/IP, DNS, Firewalls, VPNs, and network architecture.
• Practical Experience with modern EDR tools.

Technical Knowledge - Strong Understanding Of

• Endpoint Detection and Response (EDR)
• Security Operations Center (SOC) processes
• Incident Response lifecycle management
• Vulnerability Management
• Cloud Security Fundamentals
• Networking concepts and protocols
• Identity and Access Management
• Operating SystemSecurity (Windows and Linux)
• Security frameworks such as NIST CSF, CIS Controls, and ISO 27001

Tool Experience - Hands-on Experience With

• CrowdStrike Falcon and Wiz
• Vulnerability Management Platforms
• SIEM Solutions
• Microsoft Defender Ecosystem, Microsoft Entra ID/Active Directory
• Azure, AWS, and/or GCP Security Controls

Certifications - At Least 1

• CompTIA Security+ or CompTIA CySA+ (Cybersecurity Analyst)8`
• GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• Associate of ISC2 (working toward CISSP)

Compensation

The salary range for this position is: $73,000 - 95,000

At Vitu, our engaged workforce is the key to our success. We are committed to creating a positive, inclusive, and motivating environment where employees feel valued, connected, and empowered. We have an Employee first culture and foster a collaborative environment where innovation, creativity, diverse ideas and opinions are valued. We value each team member and ensure they have the opportunity to grow and contribute to the success of our organization.

At Vitu, we care for our employees and their families. We offer a comprehensive benefits package including:

• Healthcare Coverage for you and your family covering Medical, Dental & Vision
• Tax Advantage accounts such as Health Savings Account (HSA) & Flexible Spending Accounts (FSA)
• Generous PTO
• Pet Insurance
• Retirement Planning
• ID Theft Insurance
• Life and Disability Insurance
• Commuter Benefits
• Accident & Hospital, Critical Illness Insurance
• Tuition Reimbursement

Vitu is an Equal Employment Opportunity Employer. We value diversity and are dedicated to providing an equal and inclusive working environment. We are committed to providing an environment that is free from discrimination and harassment. We do not discriminate on the basis of race, color, religion, age, sex, sexual orientation, gender identity, ethnicity, national origin or ancestry, disability, marital status, veteran status or any other category protected by applicable federal, state or local law. Vitu is committed to providing reasonable accommodations when requested by an applicant or employee with disabilities, unless such accommodations would cause undue hardship.