IT 安全分析师 I (夜班)
IT Security Analyst I (Evening Shift)
在VC3，我们不只是解决IT问题——我们全权负责。我们为美国和加拿大的数百个市政机构和组织提供服务，将IT带给最需要的人。我们相信赢得信任、保持成长型思维，并且每次都能交付卓越。我们是一支实干者、建设者和技术高手组成的团队，始终秉持四项核心价值观：
超越界限 | 全权负责 | 保持好奇 | 团队协作
我们以让IT更贴近个人、更简单、更准确而自豪。这一切都始于我们才华横溢的团队，他们致力于不断提升标准。
你将带来的影响：
你将负责管理安全事件监控和事件响应工单队列，确保按照服务级别协议和目标及时有效地进行优先级排序。你将理解并遵循VC3的方式，这是一套标准和流程，能够为客户带来可预测的结果，利用端点检测与响应工具调查警报并构建潜在威胁的准确时间线。
候选人必须能够在此职位上从下午4点至凌晨1点EST工作。你将从事的工作包括：
- 将网络安全概念转化为非技术术语，使客户能清楚理解其业务重点的具体应用
- 管理安全事件监控和事件响应工单队列，并根据需要进行优先级排序以满足既定的服务级别协议/目标
- 清晰传达违规指标、隔离和修复步骤
- 分析和解释系统、安全和应用程序日志，以诊断故障、发现异常行为并排除误报
- 有效利用VC3和客户工具集，包括但不限于端点检测与响应工具，调查警报、异常情况并构建与可能入侵相关的准确时间线
- 按照既定程序调查、升级、遏制或消除恶意活动
- 编写和口头汇报报告给客户、团队成员和管理层，汇总并传达安全信息和指标
- 提供输入和建议以改进内部流程和程序
- 参与威胁狩猎活动和其他特殊项目
- 其他职责
- 职位安排为下午4点至凌晨1点EST
你带来的工具：
- 信息安全或相关领域的两年工作经验
- 以下认证之一优先：C
查看英文原文
At VC3, we don’t just solve IT problems — we own them. We serve hundreds of municipalities and organizations across the United States and Canada, bringing IT to the people who need it most. We believe in earning trust, having a growth mindset, and delivering excellence every single time. We're a team of doers, builders, and tech whisperers who live by 4 core values:
Go Beyond | Own It | Be Curious| Serve as One
We pride ourselves on making IT personal, making IT easy, and getting IT right. And it all starts with our talented team that is committed to raising the bar.
The Impact you will have:
You will be responsible for managing security event monitoring and incident response ticket queues, ensuring timely and effective triage in line with service level agreements and objectives. You will understand and follow the VC3 way, a set of standards and processes that produce a predictable result for the client, utilizing End Detection and Response tools to investigate alerts and build accurate timelines of potential threats.
Candidates must be available 4pm - 1am EST for this role. What you will be doing:
- Translate Cyber Security concepts into non-technical terms for clients to clearly understand specific applications to their business priorities.
- Manage the security event monitoring and incident response ticket queues and triage as appropriate to meet the established service level agreements/objectives
- Clearly convey indicators of compromise, isolation, and remediation steps
- Analyze and interpret system, security, and application logs in order to diagnose faults, spot abnormal behavior, and rule out false positives
- Effectively utilize VC3 and client toolsets include, but not limited to, End Detection and Response tools to investigate alerts, anomalies and build accurate timelines related to possible compromise
- Follow established procedures to investigate, escalate, contain, or eradicate malicious activity
- Develop and deliver written and oral reports to clients, teammates, and management to aggregate and communicate security information and metrics
- Provide input and recommendations to improve internal processes and procedures
- Participate in threat hunting activities and other special projects as required
- Additional duties as required
- Role is scheduled for 4pm - 1am EST
The tools you bring:
- Two years’ work experience in the Information Security or related fields
- One of the following certifications preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent
- Experience with SIEM platforms, firewall management, and endpoint detection and response platforms
- One year or more of experience with EDR solutions, ESGs, vulnerability management and content filtering
- Go Beyond – you take that extra step to create moments that are unexpected but appreciated.
- Own It - You have the courage to do what's right, the resolve to take responsibility, and the grit to cross the finish line.
- Be Curious - You challenge the status quo and aim for continuous improvement and constant learning.
- Serve as One - You believe that together, we are greater than the sum of our individuals, and that teamwork is essential to success.
What's in it for you:
- Flexibility– We’re remote-first, but not remote-only. Some roles include an onsite component, depending on team needs. We aim to give you the flexibility to do your best work, plus company-paid time off to help you thrive in work and in life.
- Well-being & Support - Caring for our team goes beyond the workday. We offer a range of benefits to support your overall well-being, from mental health and leave support through our Employee and Family Assistance Program, to financial wellness through company-matched 401(k)/RRSP plans. Whether it’s today’s needs or tomorrow’s goals, we’ve got you covered.
- Grow with Us – Whether you’re just getting started or ready to take the next step, we are committed to investing in your growth. We offer structured development through our Leadership Academy, monthly learning sessions, mentorship programs, learning reimbursements, internal career fairs, job shadowing, and personalized career-pathing to support internal mobility.
- People-First Culture – We live our values, support each other, and create a space where everyone belongs. We have a common goal of doing work that matters, with autonomy, recognition, and a mission to serve those who serve.
- Transparent Leadership – From open communication to clear company goals, our leaders are involved, and our managers are here to support your growth every step of the way.
Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment
Thank you for your interest in VC3. We appreciate all applications; however, only those candidates selected for an interview will be contacted.
Learn more about VC3 by visiting our website and follow us on LinkedIn to stay informed!
Originally posted on Himalayas