IT - SCDMV - Security Analyst - Entry

Security Comments :

The selected resource will need to successfully complete the following screenings once in onboarding: 7 Year Standard Background Check & Credit History Check 7-Year Certified Driving Record (MVR) 5-Panel Drug Screening SCDMV Fingerprinting - this MUST be done in South Carolina at least 5 business days before the resource starts

Position Description :

Please ensure you attach the SC Cover Sheet (attached), a valid Right to Represent, and the candidate's resume with full legal first name, and last name. Posting attachments should be named as AttachmentName_PostingID_LastName_FirstName. Ex: Resume_1234_Last_First, RTR_1234_Last_First, Coversheet_1234_Last_First Withdrawn candidates will not be permitted to be replaced. If you would like to use a sub vendor, only 1 level deep, please submit the Sub Vendor usage form. The State of South Carolina is looking for a Security Analyst - Entry Why is this position open: New position to accommodate increased workload and expansion of security team. Max $$$: $$$/hour Will close to submissions on October 9th, 2026, 5:00PM EST. Interview Process: 1-2 Rounds of Virtual or Onsite Interviews. Candidates are expected to be available for onsite interviews. Duration of the Contract: 12 Months Possibility for Extension: Yes Work Location: Fully Onsite - NO flexibility for hybrid or remote work Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed. Availability for Saturday and Sunday Evening shifts are required as they will be part of the selected resource s schedule after training. This is mandatory. Candidate must be willing to sign an NDA if they are selected to interview. Working Schedule: Saturday and Sunday evening coverage likely to be 8:00PM-8:00AM (2 12-Hour Shifts) with dayshifts Wednesday and Thursday (8:30 AM - 2:45 PM) Company / Department culture (why do you enjoy working for the company selling points for potential candidates): The South Carolina Department of Motor Vehicles (SCDMV) prioritizes secure and efficient IT systems to ensure the integrity of motor vehicle licensing and titling data. We cultivate a security-focused culture, guided by our core values of competence, commitment, and courtesy, where IT professionals play a vital role in protecting sensitive information and upholding public trust. Why is this position open (new role, increased workload, new dept, resignation, promotion)? New position. Expansion of security team and workload. Scope of the project: Enhance the security posture of the South Carolina Department of Motor Vehicles (SCDMV) to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems. Availability for Saturday and Sunday Evening shifts are required as they will be part of the selected resource s schedule after training. This is mandatory. Start Date: 11/16/26 Duration: 1 Year Possibility of Extension? Yes Position: Security Analyst - Entry Pre-employment Checks (drug, credit, criminal, motor vehicle)? Criminal, Credit, must be willing to sign NDA before interview Daily Duties / Responsibilities: The DMV Security Team is looking for candidates to fill an entry level security position. The DMV will train the selected candidate to perform the tasks listed below. At a minimum We are looking for basic server or network administration skills that we can build upon. 1. Threat Intelligence Research o Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization. o Document findings, such as new attack methods or vulnerabilities, and share with the team. o Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries. 2. Threat Hunting and Detection Rule Creation o Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks. o Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats. o Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules). o Document hunting methodologies and findings to support continuous improvement. 3. Log Analysis o Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs). o Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts. o Maintain a log of recurring patterns or anomalies for long-term tracking and analysis. 4. Incident Response o Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK). o Identify and escalate potential security threats. o Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents. o Document findings during incidents and contribute to containment and remediation efforts. 5. Documentation, Reporting, and Communication o Create clear, detailed reports, including incident reports, after-action reviews, and process documentation. o Deliver reports on the security posture and propose mitigation strategies. o Draft training materials or guides to help improve organizational awareness and readiness. o Regularly update and organize documentation to ensure accuracy and accessibility for team use. 6. Vulnerability Management o Analyze reports, prioritize patching, and understand NIST best practices. 7. Security Awareness Training o Develop and deliver training and assess employee awareness through simulations. 8. Security Automation and Scripting o Leverage SCCM, GPO, and PowerShell for patch deployment. o Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency. 9. Endpoint and Network Security o Configure policies, analyze alerts, and manage endpoint protection. o Understand network protocols and firewalls to strengthen the overall security posture. 10. Digital Forensics and Cloud Security o Investigate security incidents and collect evidence for deeper analysis. o Develop knowledge of cloud-specific security solutions as cloud adoption grows. Required Skills (rank in order of Importance): Understanding of security concepts and processes Understanding of basic computer and network concepts Preferred Skills (rank in order of Importance): 1+ Years of Experience in Server or Network Administration 1+ Year of Experience in an IT Security Focused Role Experience with SIEM and Endpoint Security Tools Experience with PowerShell, Group Policy, and Endpoint Management Knowledge of Vulnerability Management and Cloud Security Bachelor s Degree in Information Technology, Computer Science, Cybersecurity, or a related field Additional Skills Problem-Solving: Analyze data, identify anomalies, and recommend solutions. Attention to Detail: Ensure accurate analysis and configuration for effective security measures. Ability to communicate and work effectively with a mid-size team Required Education and experience: A High School Diploma is required at minimum Certifications: Not required, however we prioritize applicants who have: GIAC Security Essentials (GSEC) Security+ (CompTIA) Network+ (CompTIA) GIAC Incident Handler (GCIH)