Information Security Analyst II; Remote

Information Security Analyst II (Remote)

Vitu provides innovative, cutting-edge services to the motor vehicle industry. Our namesake solution manages titling and registration transactions in all 50 states and across multiple locations — all on one platform. With the mission of expanding and automating Vehicle-to-Government (V2

Gov) transactions, the Vitu platform is reimagining how drivers, businesses and governments interact with vehicles. Vitu has offices in California, Florida, Georgia, Illinois, Indiana, Kentucky, Minnesota, Montana, North Carolina, New Hampshire, New Jersey, New York, Ohio, Oregon, Pennsylvania, and Virginia.

The Information Security Analyst II is responsible for monitoring, analyzing, investigation, and remediation security risks across the enterprise environment. This role performs threat detection, vulnerability management, cloud security assessments, endpoint protection administration, incident response, and security control validation. The Analyst partners with IT Operations, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to reduce organizational risk and improve security posture. A primary focus is to leverage Crowestrike, Wis, and related security platforms to identify, investigate, prioritize, and drive remediation of security vulnerabilities, misconfiguration, and compliance gaps.

• Monitor and investigate security alerts generated by SIEM, EDR, cloud security, and threat detection tools.

• Analyze suspicious activities and indicators of compromise across endpoints, servers, cloud environments, and applications.

• Perform threat hunting activities using Crowdstrike Falcon and other security platforms

• Escalate confirmed incidents according to incident response procedures.

• Document findings, evidence, and recommendations.

• Administer and support Crowd Strike Falcon security controls and policies.

• Investigate endpoint detections, malware alerts, behavioral indicators, and threat intelligence findings.

• Analyze process executions, persistence mechanisms, lateral movement attempts, and suspicious endpoint activity.

• Validate containment, eradication, and recovery actions following security incidents.

• Assist with deployment, tuning, and optimization of Crowd Strike capabilities including:
  Falcon Sensor, Falcon Secure, and Falcon Data Protection where applicable

• Conduct vulnerability analysis using Wiz, vulnerability scanners, and security assessment tools.

• Review vulnerability findings and determine risk severity and business impact.

• Prioritize remediation activities based on Exploitability, Asset Criticality, External exposure, Regulatory requirements, and/or Business Risk.

• Collaborate with infrastructure, cloud, application, and operations teams to track remediation activities.

• Validate remediation efforts and closure of security findings.

• Measure and report remediation performance metrics.

• Assist with User Access reviews and identity/access management tasks.

• Monitor for unusual account activity or privilege escalation.

• Help maintain security policies, procedures, and documentation

• Support audits and compliance initiatives aligned with standards such as: ISO 27001, NIST Cybersecurity Framework, and SOC2

• Support employee security awareness initiatives (e.g. phishing simulations, training, campaigns)

• Help track participation and effectiveness metrics.

• Monitor Wiz Findings across…