Security Analyst - Cybersecurity & Security Operations Contract COlumbia, SC

Security Analyst Cybersecurity & Security Operations
Location: Columbia SC Onsite

Interview Process: 1 round Virtual/Online

Duration: 12 Months
Employment Type: Contract
Experience Required: 07 Years

Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed.

Project Scope:

We are seeking an experienced Security Analyst to support active defense and cybersecurity operations across enterprise systems and networks. This hands-on role will contribute to the establishment implementation and enhancement of information security and compliance initiatives in accordance with federal state and organizational policies and standards.

The ideal candidate will have a strong foundation in IT systems security network security system administration vulnerability management and incident response. The candidate must possess excellent analytical communication and problem-solving skills and be comfortable collaborating with technical teams business stakeholders leadership and external vendors.

The Security Analyst will assess security solutions and processes provide technical guidance on security system design and implementation support security operations center (SOC) activities and help junior analysts identify and address security risks.

Key Responsibilities:

Security Operations and Monitoring

• Assist with day-to-day security operations center (SOC) monitoring activities tools and processes.
  
• Provide hands-on support for security tools and technologies.
  
• Monitor security systems and technologies for alerts anomalies and potential threats.
  
• Conduct threat hunting activities to identify evidence of compromise across systems and networks.
  
• Investigate security incidents gather relevant evidence and analyze security-related data.
  
• Analyze anomalous activity and assess potential threats to connected systems and organizational resources.
  
• Support incident response activities and coordinate with relevant teams to contain and address security issues.
  

Security Risk and Vulnerability Management

• Assess and evaluate information security solutions processes systems and networks.
  
• Perform vulnerability assessments including scanning analysis of findings and manual validation.
  
• Identify security risks and recommend appropriate mitigation strategies.
  
• Support threat and vulnerability management activities to protect the confidentiality integrity and availability of organizational data.
  
• Apply defense-in-depth principles including secure system configuration network segmentation and malicious code protection.
  
• Provide technical recommendations to influence the secure design implementation operation and maintenance of information technology systems.
  
• Guide junior security analysts in identifying risks and responding to information security issues.
  

Security Compliance and Risk Assessment

• Support information security and compliance initiatives aligned with applicable federal state and organizational policies and standards.
  
• Apply relevant security frameworks and regulatory requirements including CMS ARC-AMPE NIST COBIT and FedRAMP as applicable.
  
• Assist with security compliance assessments audits and risk mitigation activities.
  
• Support the integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
  
• Contribute to the secure management of cloud services multi-tenant environments and vendor interfaces.
  

Network and Systems Security

• Apply knowledge of operating systems and technology platforms including Windows Linux Android iOS MVS and VMware environments.
  
• Support security monitoring and analysis across networks hardware software platforms and cloud infrastructure.
  

• Analyze TCP/IP traffic and network protocols using tools such as Wireshark and tcpdump.
  
• Apply knowledge of firewalls intrusion detection and prevention systems (IDS/IPS) network security monitoring and Security Information and Event Management (SIEM) solutions.
  
• Support the secure implementation operation and ongoing maintenance of systems software hardware and networks.
  

Collaboration and Reporting

• Collaborate with cybersecurity staff technical teams business units leadership stakeholders and vendors to support security and compliance objectives.
  
• Communicate security findings incident updates risks and mitigation recommendations clearly.
  
• Prepare and maintain security documentation reports dashboards and other required deliverables.
  
• Manage multiple assignments prioritize tasks meet deadlines and report progress effectively.
  
• Adapt to changing priorities accept constructive feedback and take on new responsibilities as required.
  

Required Skills & Experience:

1. Hands-on experience or educational background in IT systems security or system administration.
   
2. Experience with information security incident response procedures and practices.
   
3. Strong understanding of enterprise IT operations and secure configuration best practices.
   
4. Ability to learn new technologies processes tools and responsibilities quickly.
   
5. Ability to work independently and collaboratively within cross-functional teams.
   
6. Experience coordinating with multiple technical teams business stakeholders and vendors.
   
7. Strong organizational skills including the ability to multitask prioritize assignments and meet deadlines.
   
8. Intermediate proficiency in Microsoft Office applications including Word Excel PowerPoint and Visio with experience using templates and formatting standards.
   
9. Ability to understand retain document and communicate technical processes.
   
10. Strong written and verbal communication skills.
    
11. Flexibility in adapting to changing requirements priorities and feedback from technical and business teams.
    

Preferred Skills

1. Prior experience in healthcare information technology (Health IT).
   
2. Experience with centralized log management solutions.
   
3. Familiarity with security frameworks and regulatory requirements including NIST 800-series publications and CMS ARC-AMPE.
   
4. Experience performing or supporting information security compliance assessments and audits.
   
5. Experience working in federal state city or local government environments.
   
6. Experience working in a Security Operations Center (SOC) including alert monitoring anomaly detection incident triage dashboard interpretation and cross-functional coordination.
   
7. Hands-on experience with vulnerability scanning security analysis network firewalls IDS/IPS SIEM tools and network security monitoring.
   
8. Knowledge of cloud security multi-tenant environments and vendor security management.
   
9. Familiarity with RMF processes and integration of security requirements into the SDLC.
   

Education:
High school diploma with at least six years of relevant work experience.

Preferred Education & Certifications

• Bachelors degree in Information Technology Computer Science or a related technical field with at least three years of relevant work experience.
  
• Relevant information security certifications such as CompTIA Security ISC2 certifications SANS/GIAC CCNA Security or equivalent credentials.
  

Required Skills:

1. Hands-on experience or educational background in IT systems security or system administration. 2. Experience with information security incident response procedures and practices. 3. Strong understanding of enterprise IT operations and secure configuration best practices. 4. Ability to learn new technologies processes tools and responsibilities quickly. 5. Ability to work independently and collaboratively within cross-functional teams. 6. Experience coordinating with multiple technical teams business stakeholders and vendors. 7. Strong organizational skills including the ability to multitask prioritize assignments and meet deadlines. 8. Intermediate proficiency in Microsoft Office applications including Word Excel PowerPoint and Visio with experience using templates and formatting standards. 9. Ability to understand retain document and communicate technical processes. 10. Strong written and verbal communication skills. 11. Flexibility in adapting to changing requirements priorities and feedback from technical and business teams.