IT Security Analyst II

VC3, Inc.; Northern (KY); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

401K matching

Comprehensive benefits

Job summary

VC3, Inc. seeks an IT Security Analyst II to join its Technology Operations team. The role focuses on monitoring, detecting, and responding to security incidents while collaborating with clients to align security with business goals.

The candidate should bring 5+ years in information security, strong knowledge of modern security tools, and a track record in threat hunting and incident response. This is a remote US-based position with opportunities for growth and professional development.

Qualifications

• Five or more years of information security or risk management experience.
• Relevant certifications such as CISSP, CEH, CISM, CISA, or CRISC are highly desirable.
• Practical knowledge of security technologies including firewalls, IDS/IPS, SIEM, IAM, cloud technologies.

Responsibilities

• Understand and follow 10The VC3 Way. Maintain standards for client results.
• Translate complex cybersecurity concepts into actionable client insights.
• Oversee security event monitoring and incident response queues to meet SLAs.
• Develop strategies to streamline incident response and improve resolution times.
• Lead threat hunting activities and special projects using advanced methodologies.

Skills

InfoSec experience

CISSP

CEH

Cloud security

Threat hunting

Tools

Firewalls

IDS/IPS

SIEM

IAM

EDR tools

Job description

IT Security Analyst II

Department: Technology Operations

Employment Type: Full Time

Location: USA - Remote

Description

VC3, an innovative and growing IT services solution provider, headquartered in Columbia, SC is seeking to fill a Senior Cybersecurity Analyst role. They will be responsible for helping organizations to protect their infrastructure, data, people and customers and will work with the existing management and technical teams to be successful.

Our People:

Our team members are collaborative, positive, and dedicated to mutual success. Transparency isn't just a buzzword here; it's a commitment to open communication, ensuring every voice is heard and valued. Guided by our core values — Passionately Curious, Own It, Go Beyond, and Serve as One — we’re here to create something extraordinary together.

Our Core Focus:

Our team members play a pivotal role in our focus: Serving those who serve with technologies for today and tomorrow that make life safe and simple. With nearly 30 years of specialized expertise, our team goes beyond conventional boundaries, delivering tailored managed services and cybersecurity solutions to our clients.

Your Growth:

We are a growth minded organization that prioritizes development, offering numerous opportunities for career advancement. Rooted in our core value of being Passionately Curious, VC3 offers a dynamic learning environment, emphasizing hands-on experiences and formal development programs that celebrate continuous learning to propel your career forward.

Key Responsibilities

• Understand and follow “The VC3 Way”. This is our set of standards and processes that produce a predictable result for the client. You must be aware of and maintain our standards
• Translate complex Cyber Security concepts into actionable insights for clients, ensuring alignment with their business priorities and enhancing their understanding of strategic security decisions.
• Oversee and prioritize security event monitoring and incident response queues, ensuring swift and accurate triage to meet or exceed established SLAs/objectives.
• Develop and implement strategies to streamline incident response processes and improve resolution times.
• Conduct comprehensive analysis of system, security, and application logs to diagnose intricate faults, identify subtle abnormal behaviors, and refine false positive reduction techniques.
• Leverage advanced tools and techniques for sophisticated threat detection and analysis.
• Utilize and optimize a broad range of VC3 and client toolsets, including advanced End Detection and Response (EDR) tools, for in-depth investigation of alerts, anomalies, and building accurate timelines related to potential security compromises.
• Formulate and execute strategic approaches for investigating, escalating, containing, and eradicating sophisticated malicious activities.
• Develop, deliver, and present detailed written and oral reports to clients, teammates, and management, focusing on security trends, metrics, and strategic recommendations.
• Provide strategic input and recommendations for improving internal processes, procedures, and security practices based on industry trends and operational experience.
• Lead threat hunting activities and oversee special projects, employing advanced methodologies to proactively identify and mitigate potential threats.

Additional Responsibilities

• Advocate for and lead the adoption of innovative security solutions and methodologies within the organization.
• Collaborate with internal stakeholders to address changes in technologies, practices, and business activities that may impact security.
• Facilitate cross-departmental initiatives to enhance client security and mitigate threats.
• Maintain and update comprehensive documentation related to security operations, threat analysis, and incident management.
• Ensure timely and accurate communication with clients and internal teams, reflecting changes and new findings effectively.
• Mentor and guide Security Analyst I team members, providing support and sharing expertise to enhance their skills and knowledge.
• Lead by example in adhering to security best practices, and take ownership of complex security issues, leading escalation efforts to senior resources or specialized teams.
• Engage actively in team huddles, L10 meetings, and other collaboratively structured meetings.
• Review Tickets with Manager
• Attend company-based meetings as required
• Participate in the on-call rotation (1 week every ~ 1.5-2 months)
• Additional duties as required

Skills, Knowledge and Expertise

• Five or more years of work experience in information security, risk management, or related fields.
• One of the following certifications preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent
• Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified Risk & Information Security Controls (CRISC) are highly desirable.
• Practical knowledge of security technologies and tools, including Firewalls, IDS/IPS, SIEM, Identity and Access Management (IAM), remote working solutions, and cloud technologies.
• Understanding of current and emerging threats, countermeasures, and organizational challenges in addressing these threats.
• Awareness of information security management frameworks and industry regulations (e.g., NIST, ISO 27001, GDPR).
• Strong problem-solving and decision-making abilities with a capacity to analyze complex issues and develop effective solutions.
• Excellent verbal and written communication skills, with the ability to present complex technical issues in a clear and simple format.
• Self-motivated, detail orientated, highly organized and able to handle a variety of tasks and responsibilities in an efficient manner with a high level of quality
• Demonstrates effective communication skills, both written and verbal
• Shows the ability to adapt and thrive in ambiguous or uncertain situations, quickly assessing and navigating challenges.

Additional information you will want to know:

• Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment
• Minimal travel required
• VC3 offers a comprehensive benefit package and 401K/RRSP company matching

Thank you for your interest in VC3. We appreciate all applications; however, only those candidates selected for an interview will be contacted.