Information Security Analyst II (Remote)

Information Security Analyst II (Remote)

Vitu provides innovative, cutting-edge services to the motor vehicle industry. Our namesake solution manages titling and registration transactions in all 50 states and across multiple locations — all on one platform. With the mission of expanding and automating Vehicle-to-Government (V2Gov) transactions, the Vitu platform is reimagining how drivers, businesses and governments interact with vehicles. Vitu has offices in California, Florida, Georgia, Illinois, Indiana, Kentucky, Minnesota, Montana, North Carolina, New Hampshire, New Jersey, New York, Ohio, Oregon, Pennsylvania, and Virginia.

The Information Security Analyst II is responsible for monitoring, analyzing, investigation, and remediation security risks across the enterprise environment.  This role performs threat detection, vulnerability management, cloud security assessments, endpoint protection administration, incident response, and security control validation.  The Analyst partners with IT Operations, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to reduce organizational risk and improve security posture.  A primary focus is to leverage Crowestrike, Wis, and related security platforms to identify, investigate, prioritize, and drive remediation of security vulnerabilities, misconfiguration, and compliance gaps. 

 Key Responsibilities

• Monitor and investigate security alerts generated by SIEM, EDR, cloud security, and threat detection tools.

• Analyze suspicious activities and indicators of compromise across endpoints, servers, cloud environments, and applications.

• Perform threat hunting activities using Crowdstrike Falcon and other security platforms

• Escalate confirmed incidents according to incident response procedures.

• Document findings, evidence, and recommendations.
  

Incident Response Support

• Administer and support CrowdStrike Falcon security controls and policies.

• Investigate endpoint detections, malware alerts, behavioral indicators, and threat intelligence findings. 

• Analyze process executions, persistence mechanisms, lateral movement attempts, and suspicious endpoint activity.

• Validate containment, eradication, and recovery actions following security incidents.

• Assist with deployment, tuning, and optimization of CrowdStrike capabilities including:  Falcon Sensor, Falcon Secure, and Falcon Data Protection where applicable
  

Vulnerability Management

• Conduct vulnerability analysis using Wiz, vulnerability scanners, and security assessment tools.

• Review vulnerability findings and determine risk severity and business impact.

• Prioritize remediation activities based on Exploitability, Asset Criticality, External exposure, Regulatory requirements, and/or Business Risk.

• Collaborate with infrastructure, cloud, application, and operations teams to track remediation activities.

• Validate remediation efforts and closure of security findings.

• Measure and report remediation performance metrics.
  

Access & Identity Support

• Assist with User Access reviews and identity/access management tasks.

• Monitor for unusual account activity or privilege escalation.
  

Compliance & Documentation

• Help maintain security policies, procedures, and documentation

• Support audits and compliance initiatives aligned with standards such as:  ISO 27001, NIST Cybersecurity Framework, and SOC2
  

Security Awareness

• Support employee security awareness initiatives (e.g. phishing simulations, training, campaigns)

• Help track participation and effectiveness metrics.
  

Wiz Cloud Security Operations

• Monitor Wiz Findings across Multi-cloud environments.

• Investigate cloud misconfigurations, exposed assets, identity risks, vulnerable workloads, excessive privileges, data exposure risks. 

• Analyze attack paths and toxic combinations

• Partner with cloud engineering teams to implement corrective actions

• Assist with Cloud Workload Protection Platform (CWPP)
  

Risk Management and Security Projects

• Assess technical risks and document mitigation plans.  

• Support risk exception reviews and compensation control evaluations.

• Participate in security initiatives involving Identity and access mgmt, data loss prevention, endpoint security, vulnerability remediation, encryption and secure configuration.
  

Minimum Qualifications and Experience

• Bachelor's degree in Cybersecurity, IT, Computer Science or related, or equivalent training/certifications.

• 2-5 years of experience in Information Security, Cybersecurity Operations, Security Engineering, or Vulnerability Management.

• Experience supporting enterprise security operations, in a cloud-enabled environment as well as working with security incidents and remediation efforts.

• Hands on with SIEM & Logging.

• Strong understanding of Networking of OSI model, TCP/IP, DNS, Firewalls, VPNs, and network architecture.

• Practical Experience with modern EDR tools.
  

Technical Knowledge - Strong Understanding of:

• Endpoint Detection and Response (EDR)

• Security Operations Center (SOC) processes

• Incident Response lifecycle management

• Vulnerability Management

• Cloud Security Fundamentals

• Networking concepts and protocols

• Identity and Access Management

• Operating SystemSecurity (Windows and Linux)

• Security frameworks such as NIST CSF, CIS Controls, and ISO 27001
  

Tool Experience - Hands-on Experience with:

• CrowdStrike Falcon and Wiz

• Vulnerability Management Platforms

• SIEM Solutions

• Microsoft Defender Ecosystem, Microsoft Entra ID/Active Directory

• Azure, AWS, and/or GCP Security Controls
  

Certifications - At least 1:

• CompTIA Security+ or CompTIA CySA+ (Cybersecurity Analyst)8`

• GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH)

• Certified Ethical Hacker (CEH)

• Associate of ISC2 (working toward CISSP)
  

Compensation   

The salary range for this position is:  $73,000 - 95,000

The final pay for this position will be determined by multiple factors including, but not limited to, location, education, experience, training and skills.

At Vitu, our engaged workforce is the key to our success. We are committed to creating a positive, inclusive, and motivating environment where employees feel valued, connected, and empowered. We have an Employee first culture and foster a collaborative environment where innovation, creativity, diverse ideas and opinions are valued. We value each team member and ensure they have the opportunity to grow and contribute to the success of our organization. 

At Vitu, we care for our employees and their families. We offer a comprehensive benefits package including:

• Healthcare Coverage for you and your family covering Medical, Dental & Vision

• Tax Advantage accounts such as Health Savings Account (HSA) & Flexible Spending Accounts (FSA)

• Generous PTO

• Pet Insurance

• Retirement Planning

• ID Theft Insurance

• Life and Disability Insurance

• Commuter Benefits

• Accident & Hospital, Critical Illness Insurance

• Tuition Reimbursement
  

Vitu is an Equal Employment Opportunity Employer. We value diversity and are dedicated to providing an equal and inclusive working environment. We are committed to providing an environment that is free from discrimination and harassment. We do not discriminate on the basis of race, color, religion, age, sex, sexual orientation, gender identity, ethnicity, national origin or ancestry, disability, marital status, veteran status or any other category protected by applicable federal, state or local law. Vitu is committed to providing reasonable accommodations when requested by an applicant or employee with disabilities, unless such accommodations would cause undue hardship.