Security Analyst

The Security Analyst - Consultant is a hands-on cybersecurity role within the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity. This position focuses on defending systems and networks by assessing security solutions, guiding junior analysts, and supporting compliance with federal, state, and agency policies. The role requires strong technical knowledge, effective communication skills, and collaboration with multiple stakeholders to enhance the organization's security posture. Responsibilities:

• Assess and evaluate information and cybersecurity solutions and processes.
• Provide technical advisory for the design and implementation of secure IT systems and networks.
• Guide junior security analysts in identifying and addressing risks.
• Lead responses to information security issues and incidents.
• Assist in day-to-day Security Operations Center (SOC) monitoring activities, tools, and processes.
• Conduct threat hunts to detect evidence of compromise.
• Monitor security technologies for alerts and investigate incidents.
• Analyze anomalous activity and potential threats to agency resources.
• Collaborate with agency staff, leadership, business partners, and vendors to support security and compliance efforts.
• Support information security risk mitigation and compliance assessments.
• Perform other duties as assigned.

• Hands-on experience or educational background in IT system security or system administration.
• Experience with incident response procedures and practices.
• Strong written and verbal communication skills.
• Ability to multitask, prioritize, and work independently or as part of a team.
• Intermediate skills in Microsoft Office products including Word, Excel, PowerPoint, and Visio.
• Strong understanding of enterprise operations and secure best practices.
• Ability to absorb, retain, and communicate processes effectively.
• High school diploma with six years of relevant work experience.

• Bachelor's degree in information technology, computer science, or related technical field with at least 3 years of relevant experience.
• Information security certifications such as CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar.
• Prior Health Information Technology experience.
• Experience with centralized log management.
• Familiarity with security regulatory requirements and standards (e.g., NIST 800 series, ARC-AMPE).
• Experience performing or supporting information security compliance assessments and audits.
• Work or consulting experience in federal, state, city, or government sectors.
• Experience working in or contributing to a Security Operations Center (SOC) environment.
• Knowledge of RMF tasks and integration into the System Development Life Cycle (SDLC).
• Understanding of multi-tenant cloud services and vendor interface management.
• Working knowledge of TCP/IP protocols and network analysis tools such as tcpdump and Wireshark.

• Candidate must be a resident of South Carolina; no relocation allowed.
• Position requires a 7-year standard background check and credit history check.
• Compliance with multiple confidentiality and IT use agreements is mandatory.
• Strict adherence to security policies and regulatory standards.
• Temporary worker agreement with a contract duration of 12 months and possibility for extension.
• Fully onsite work location at 1801 Main Street, Columbia, South Carolina.

• Full-time position, 40 hours per week.
• Standard daytime shifts; no mention of night or weekend shifts.
• Contract start date projected for November 14, 2026, lasting 12 months.