Information Security Analyst II (Remote)
Information Security Analyst II (Remote)
As the leading innovator in Vehicle-to-Government (V2Gov) technology, Vitu is transforming the way vehicles, businesses, government, and drivers interact with one another.
Vitu provides innovative, cutting-edge services to the motor vehicle industry. Our namesake solution manages titling and registration transactions in all 50 states and across multiple locations - all on one platform. With the mission of expanding and automating Vehicle-to-Government (V2Gov) transactions, the Vitu platform is reimagining how drivers, businesses and governments interact with vehicles. Vitu has offices in California, Florida, Georgia, Illinois, Indiana, Kentucky, Minnesota, Montana, North Carolina, New Hampshire, New Jersey, New York, Ohio, Oregon, Pennsylvania, and Virginia.
Job Summary
The Information Security Analyst II is responsible for monitoring, analyzing, investigation, and remediation security risks across the enterprise environment. This role performs threat detection, vulnerability management, cloud security assessments, endpoint protection administration, incident response, and security control validation. The Analyst partners with IT Operations, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to reduce organizational risk and improve security posture. A primary focus is to leverage Crowestrike, Wis, and related security platforms to identify, investigate, prioritize, and drive remediation of security vulnerabilities, misconfiguration, and compliance gaps.
Key Responsibilities
Security Monitoring & Analysis
Monitor and investigate security alerts generated by SIEM, EDR, cloud security, and threat detection tools.
Analyze suspicious activities and indicators of compromise across endpoints, servers, cloud environments, and applications.
Perform threat hunting activities using Crowdstrike Falcon and other security platforms
Escalate confirmed incidents according to incident response procedures.
Document findings, evidence, and recommendations.
Incident Response Support
Administer and support CrowdStrike Falcon security controls and policies.
Investigate endpoint detections, malware alerts, behavioral indicators, and threat intelligence findings.
Analyze process executions, persistence mechanisms, lateral movement attempts, and suspicious endpoint activity.
Validate containment, eradication, and recovery actions following security incidents.
Assist with deployment, tuning, and optimization of CrowdStrike capabilities including: Falcon Sensor, Falcon Secure, and Falcon Data Protection where applicable
Vulnerability Management
Conduct vulnerability analysis using Wiz, vulnerability scanners, and security assessment tools.
Review vulnerability findings and determine risk severity and business impact.
Prioritize remediation activities based on Exploitability, Asset Criticality, External exposure, Regulatory requirements, and/or Business Risk.
Collaborate with infrastructure, cloud, application, and operations teams to track remediation activities.
Validate remediation efforts and closure of security findings.
Measure and report remediation performance metrics.
Access & Identity Support
Assist with User Access reviews and identity/access management tasks.
Monitor for unusual account activity or privilege escalation.
Compliance & Documentation
Help maintain security policies, procedures, and documentation
Support audits and compliance initiatives aligned with standards such as: ISO 27001, NIST Cybersecurity Framework, and SOC2
Security Awareness
Support employee security awareness initiatives (e.g. phishing simulations, training, campaigns)
Help track participation and effectiveness metrics.
Wiz Cloud Security Operations
Monitor Wiz Findings across Multi-cloud environments.
Investigate cloud misconfigurations, exposed assets, identity risks, vulnerable workloads, excessive privileges, data exposure risks.
Analyze attack paths and toxic combinations
Partner with cloud engineering teams to implement corrective actions
Assist with Cloud Workload Protection Platform (CWPP)
Risk Management and Security Projects
Assess technical risks and document mitigation plans.
Support risk exception reviews and compensation control evaluations.
Participate in security initiatives involving Identity and access mgmt, data loss prevention, endpoint security, vulnerability remediation, encryption and secure configuration.
Minimum Qualifications and Experience
Bachelors degree in Cybersecurity, IT, Computer Science or related, or equivalent training/certifications.
2-5 years of experience in Information Security, Cybersecurity Operations, Security Engineering, or Vulnerability Management.
Experience supporting enterprise security operations, in a cloud-enabled environment as well as working with security incidents and remediation efforts.
Hands on with SIEM & Logging.
Strong understanding of Networking of OSI model, TCP/IP, DNS, Firewalls, VPNs, and network architecture.
Practical Experience with modern EDR tools.
Technical Knowledge - Strong Understanding of:
Endpoint Detection and Response (EDR)
Security Operations Center (SOC) processes
Incident Response lifecycle management
Vulnerability Management
Cloud Security Fundamentals
Networking concepts and protocols
Identity and Access Management
Operating SystemSecurity (Windows and Linux)
Security frameworks such as NIST CSF, CIS Controls, and ISO 27001
Tool Experience - Hands-on Experience with:
CrowdStrike Falcon and Wiz
Vulnerability Management Platforms
SIEM Solutions
Microsoft Defender Ecosystem, Microsoft Entra ID/Active Directory
Azure, AWS, and/or GCP Security Controls
Certifications - At least 1:
CompTIA Security+ or CompTIA CySA+ (Cybersecurity Analyst)8`
GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH)
Certified Ethical Hacker (CEH)
Associate of ISC2 (working toward CISSP)
Compensation
The salary range for this position is: $73,000 - 95,000
The final pay for this position will be determined by multiple factors including, but not limited to, location, education, experience, training and skills.
At Vitu, our engaged workforce is the key to our success. We are committed to creating a positive, inclusive, and motivating environment where employees feel valued, connected, and empowered. We have an Employee first culture and foster a collaborative environment where innovation, creativity, diverse ideas and opinions are valued. We value each team member and ensure they have the opportunity to grow and contribute to the success of our organization.
At Vitu, we care for our employees and their families. We offer a comprehensive benefits package including:
Healthcare Coverage for you and your family covering Medical, Dental & Vision
Tax Advantage accounts such as Health Savings Account (HSA) & Flexible Spending Accounts (FSA)
Generous PTO
Pet Insurance
Retirement Planning
ID Theft Insurance
Life and Disability Insurance
Commuter Benefits
Accident & Hospital, Critical Illness Insurance
Tuition Reimbursement
Vitu is an Equal Employment Opportunity Employer. We value diversity and are dedicated to providing an equal and inclusive working environment. We are committed to providing an environment that is free from discrimination and harassment. We do not discriminate on the basis of race, color, religion, age, sex, sexual orientation, gender identity, ethnicity, national origin or ancestry, disability, marital status, veteran status or any other category protected by applicable federal, state or local law. Vitu is committed to providing reasonable accommodations when requested by an applicant or employee with disabilities, unless such accommodations would cause undue hardship.
Remote
Skills:
Analysis Skills, CISSP - Certified Information Systems Security Professional, Campaigns, Cloud Applications, Cloud Computing, Compensation Analysis, Computer Science, Computer Security, Corrective Action, Cryptography, DNS (Domain Name System), Diversity, Documentation, Documentation Plan, Ecosystems, Endpoint Security, Enterprise Protection, Establish Priorities, Firewalls, GCIH - GIAC Certified Incident Handler, GIAC - Global Information Assurance Certification, GSEC - GIAC Security Essentials Certification, Government, Health Plan, Hunting, ISO (International Organization for Standardization), Identity Data Management, Incident Management, Incident Response, Information Technology & Information Systems, Information/Data Security (InfoSec), International Information Systems Security Certification Consortium (ISC)2, Internet Security, Linux Operating System, Loss Prevention, Malware, Metrics, Microsoft Active Directory, Microsoft Product Family, Microsoft Windows Operating System, Network Architecture/Engineering, Open Systems Interconnection (OSI), Operational Support, Operations Security (OPSEC), Performance Analysis, Performance Metrics, Phishing, Process Analysis, Regulatory Requirements, Retirement Planning, Risk, Risk Analysis, Risk Management, Security Analysis, Security Attacks, Security Information and Event Management (SIEM), Security Infrastructure, Security Monitoring, Software Development, Software Engineering, Staff Motivation, TCP/IP (Transmission Control Protocol/Internet Protocol), Team Player, Technical Analysis, Technical Writing, U.S. National Institute of Standards and Technology (NIST), VPN (Virtual Private Network), Vulnerability Scanners
Motor Vehicle Software Corporation
