Information Security Analyst II (Remote)Job SummaryThe Information Security Analyst II is responsible for monitoring, analyzing, investigation, and remediation security risks across the enterprise environment. This role performs threat detection, vulnerability management, cloud security assessments, endpoint protection administration, incident response, and security control validation. The Analyst partners with IT Operations, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to reduce organizational risk and improve security posture. A primary focus is to leverage Crowestrike, Wis, and related security platforms to identify, investigate, prioritize, and drive remediation of security vulnerabilities, misconfiguration, and compliance gaps.
Key ResponsibilitiesSecurity Monitoring & Analysis- Monitor and investigate security alerts generated by SIEM, EDR, cloud security, and threat detection tools.
- Analyze suspicious activities and indicators of compromise across endpoints, servers, cloud environments, and applications.
- Perform threat hunting activities using Crowdstrike Falcon and other security platforms
- Escalate confirmed incidents according to incident response procedures.
- Document findings, evidence, and recommendations.
Incident Response Support- Administer and support CrowdStrike Falcon security controls and policies.
- Investigate endpoint detections, malware alerts, behavioral indicators, and threat intelligence findings.
- Analyze process executions, persistence mechanisms, lateral movement attempts, and suspicious endpoint activity.
- Validate containment, eradication, and recovery actions following security incidents.
- Assist with deployment, tuning, and optimization of CrowdStrike capabilities including: Falcon Sensor, Falcon Secure, and Falcon Data Protection where applicable
Vulnerability Management- Conduct vulnerability analysis using Wiz, vulnerability scanners, and security assessment tools.
- Review vulnerability findings and determine risk severity and business impact.
- Prioritize remediation activities based on Exploitability, Asset Criticality, External exposure, Regulatory requirements, and/or Business Risk.
- Collaborate with infrastructure, cloud, application, and operations teams to track remediation activities.
- Validate remediation efforts and closure of security findings.
- Measure and report remediation performance metrics.
Access & Identity Support- Assist with User Access reviews and identity/access management tasks.
- Monitor for unusual account activity or privilege escalation.
Compliance & Documentation- Help maintain security policies, procedures, and documentation
- Support audits and compliance initiatives aligned with standards such as: ISO 27001, NIST Cybersecurity Framework, and SOC2
Security Awareness- Support employee security awareness initiatives (e.g. phishing simulations, training, campaigns)
- Help track participation and effectiveness metrics.
Wiz Cloud Security Operations- Monitor Wiz Findings across Multi-cloud environments.
- Investigate cloud misconfigurations, exposed assets, identity risks, vulnerable workloads, excessive privileges, data exposure risks.
- Analyze attack paths and toxic combinations
- Partner with cloud engineering teams to implement corrective actions
- Assist with Cloud Workload Protection Platform (CWPP)
Risk Management and Security Projects- Assess technical risks and document mitigation plans.
- Support risk exception reviews and compensation control evaluations.
- Participate in security initiatives involving Identity and access mgmt, data loss prevention, endpoint security, vulnerability remediation, encryption and secure configuration.
Minimum Qualifications and Experience- Bachelor's degree in Cybersecurity, IT, Computer Science or related, or equivalent training/certifications.
- 2-5 years of experience in Information Security, Cybersecurity Operations, Security Engineering, or Vulnerability Management.
- Experience supporting enterprise security operations, in a cloud-enabled environment as well as working with security incidents and remediation efforts.
- Hands on with SIEM & Logging.
- Strong understanding of Networking of OSI model, TCP/IP, DNS, Firewalls, VPNs, and network architecture.
- Practical Experience with modern EDR tools.
Technical Knowledge - Strong Understanding of:
- Endpoint Detection and Response (EDR)
- Security Operations Center (SOC) processes
- Incident Response lifecycle management
- Vulnerability Management
- Cloud Security Fundamentals
- Networking concepts and protocols
- Identity and Access Management
- Operating SystemSecurity (Windows and Linux)
- Security frameworks such as NIST CSF, CIS Controls, and ISO 27001
Tool Experience - Hands-on Experience with:
- CrowdStrike Falcon and Wiz
- Vulnerability Management Platforms
- SIEM Solutions
- Microsoft Defender Ecosystem, Microsoft Entra ID/Active Directory
- Azure, AWS, and/or GCP Security Controls
Certifications - At least 1:
- CompTIA Security+ or CompTIA CySA+ (Cybersecurity Analyst)8`
- GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH)
- Certified Ethical Hacker (CEH)
- Associate of ISC2 (working toward CISSP)
Compensation The salary range for this position is: $73,000 - 95,000
The final pay for this position will be determined by multiple factors including, but not limited to, location, education, experience, training and skills.
At Vitu, we care for our employees and their families. We offer a comprehensive benefits package including:- Healthcare Coverage for you and your family covering Medical, Dental & Vision
- Tax Advantage accounts such as Health Savings Account (HSA) & Flexible Spending Accounts (FSA)
- Generous PTO
- Pet Insurance
- Retirement Planning
- ID Theft Insurance
- Life and Disability Insurance
- Commuter Benefits
- Accident & Hospital, Critical Illness Insurance
- Tuition Reimbursement
