IT Security Analyst - Entry Level

Job Description

Job Description

IT Security Analyst – Entry Level

Project Identifier

SC

Client

South Carolina

Agency

State of South Carolina

Location

Onsite; availability for Saturday and Sunday evening shifts is mandatory after training.

Location: 10311 Wilson Blvd, Blythewood, SC, USA, 29033

Candidate location:  Candidate must be a CURRENT SC resident. No relocation allowed. 

Contract Duration

12 Months

Interview Type

Online

Visa Requirements

The candidate will have to be on an Innosoft W2.

At least 6 months of valid work authorization

(Citizen, GC, EAD, OPT-EAD, H4-EAD)

Tentative Start Date

11/16/2026

Deadline

10/08/2026

Project Overview

The South Carolina Department of Motor Vehicles (SCDMV) is focused on maintaining secure and efficient IT systems that protect sensitive citizen information and ensure the integrity of motor vehicle licensing and titling data. The objective of this engagement is to strengthen the agency’s overall security posture, safeguard critical systems and data, reduce security risks, and support a security-focused IT environment that maintains public trust.

Duties/Responsibilities:

Entry-Level Security Position

• Support the DMV Security Team in day-to-day cybersecurity activities.
  
• Receive training to perform assigned security responsibilities.
  
• Apply basic server or network administration skills as a foundation for cybersecurity responsibilities.
  

Threat Intelligence Research

• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
  
• Document new attack methods, vulnerabilities, and other threat findings.
  
• Share relevant threat intelligence findings with the security team.
  
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
  

Threat Hunting and Detection Rule Creation

• Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
  
• Utilize threat feeds to support threat-hunting activities.
  
• Investigate suspicious activity across network and endpoint environments.
  
• Stay current on emerging cybersecurity threats.
  
• Collaborate with senior analysts to refine and test detection rules.
  
• Assist with SIEM queries and Microsoft Defender for Endpoint detection rules.
  
• Document threat-hunting methodologies and findings to support continuous improvement.
  

Log Analysis

• Review and interpret firewall, endpoint, and server logs.
  
• Identify indicators of compromise (IOCs).
  
• Identify anomalous IP addresses, unauthorized access attempts, and other suspicious activity.
  
• Escalate identified security findings to senior analysts.
  
• Maintain records of recurring patterns and anomalies for long-term tracking and analysis.
  

Incident Response

• Assist with the initial triage of cybersecurity incidents.
  
• Follow incident response frameworks such as NIST and MITRE ATT&CK.
  
• Identify and escalate potential security threats.
  
• Gather relevant evidence during security incidents.
  
• Analyze logs and alert data to determine the scope and severity of incidents.
  
• Document findings during incident investigations.
  
• Contribute to incident containment and remediation efforts.
  

Documentation, Reporting, and Communication

• Create clear and detailed incident reports.
  
• Prepare after-action reviews following security incidents.
  
• Develop and maintain security process documentation.
  
• Deliver reports on the organization’s security posture.
  
• Propose appropriate security mitigation strategies.
  
• Draft training materials and security guides to improve organizational awareness and readiness.
  
• Regularly update and organize documentation to maintain accuracy and accessibility for team use.
  

Vulnerability Management

• Analyze vulnerability reports.
  
• Prioritize patching and remediation activities.
  
• Understand and apply NIST best practices related to vulnerability management.
  
• Security Awareness Training
  
• Develop security awareness training.
  
• Deliver security awareness training to employees.
  
• Conduct or support security awareness simulations.
  
• Assess employee security awareness through simulations.
  

Security Automation and Scripting

• Leverage SCCM for patch deployment.
  
• Use Group Policy (GPO) to support patch deployment and security administration.
  
• Use PowerShell for patch deployment and automation.
  
• Automate tasks beyond SCCM, GPO, and PowerShell to increase operational efficiency.
  

Endpoint and Network Security

• Configure endpoint security policies.
  
• Analyze endpoint security alerts.
  
• Manage and support endpoint protection.
  
• Apply knowledge of network protocols to security activities.
  
• Apply knowledge of firewalls to strengthen network security.
  
• Support efforts to improve the organization’s overall security posture.
  

Digital Forensics and Cloud Security

• Investigate cybersecurity incidents.
  
• Collect evidence related to security incidents for deeper analysis.
  
• Support digital forensic investigation activities.
  
• Develop knowledge of cloud-specific security solutions.
  
• Support security requirements as the organization’s cloud adoption grows.
  

Education and Certifications:

• High School Diploma is required; minimum GIAC Security Essentials (GSEC)