Security Analyst – Cybersecurity & Security Operations - Contract - COlumbia, SC

Security Analyst – Cybersecurity & Security Operations Location: Columbia, SC Onsite

Interview Process: 1 round, Virtual/Online Duration: 12 Months Employment Type: Contract Experience Required: 07+ Years

Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed.

Project Scope:

We are seeking an experienced Security Analyst to support active defense and cybersecurity operations across enterprise systems and networks. This hands-on role will contribute to the establishment, implementation, and enhancement of information security and compliance initiatives in accordance with federal, state, and organizational policies and standards.

The ideal candidate will have a strong foundation in IT systems security, network security, system administration, vulnerability management, and incident response. The candidate must possess excellent analytical, communication, and problem-solving skills and be comfortable collaborating with technical teams, business stakeholders, leadership, and external vendors.

The Security Analyst will assess security solutions and processes, provide technical guidance on security system design and implementation, support security operations center (SOC) activities, and help junior analysts identify and address security risks.

Key Responsibilities:

Security Operations and Monitoring

• Assist with

day-to-day security operations center (SOC) monitoring activities, tools, and processes.

• Provide

hands-on support for security tools and technologies.

• Monitor

security systems and technologies for alerts, anomalies, and potential threats.

• Conduct

threat hunting activities to identify evidence of compromise across systems and networks.

• Investigate

security incidents, gather relevant evidence, and analyze security-related data.

• Analyze

anomalous activity and assess potential threats to connected systems and organizational resources.

• Support

incident response activities and coordinate with relevant teams to contain and address security issues.

Security Risk and Vulnerability Management

• Assess and

evaluate information security solutions, processes, systems, and networks.

• Perform

vulnerability assessments, including scanning, analysis of findings, and manual validation.

• Identify

security risks and recommend appropriate mitigation strategies.

• Support

threat and vulnerability management activities to protect the confidentiality, integrity, and availability of organizational data.

• Apply

defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.

• Provide

technical recommendations to influence the secure design, implementation, operation, and maintenance of information technology systems.

• Guide junior

security analysts in identifying risks and responding to information security issues.

Security Compliance and Risk Assessment

• Support

information security and compliance initiatives aligned with applicable federal, state, and organizational policies and standards.

• Apply

relevant security frameworks and regulatory requirements, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP, as applicable.

• Assist with

security compliance assessments, audits, and risk mitigation activities.

• Support the

integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).

• Contribute

to the secure management of cloud services, multi-tenant environments, and vendor interfaces.

Network and Systems Security

• Apply

knowledge of operating systems and technology platforms, including Windows, Linux, Android, iOS, MVS, and VMware environments.

• Support

security monitoring and analysis across networks, hardware, software platforms, and cloud infrastructure.

• Analyze

TCP/IP traffic and network protocols using tools such as Wireshark and tcpdump.

• Apply

knowledge of firewalls, intrusion detection and prevention systems (IDS/IPS), network security monitoring, and Security Information and Event Management (SIEM) solutions.

• Support the

secure implementation, operation, and ongoing maintenance of systems, software, hardware, and networks.

Collaboration and Reporting

• Collaborate

with cybersecurity staff, technical teams, business units, leadership, stakeholders, and vendors to support security and compliance objectives.

• Communicate

security findings, incident updates, risks, and mitigation recommendations clearly.

• Prepare and

maintain security documentation, reports, dashboards, and other required deliverables.

• Manage

multiple assignments, prioritize tasks, meet deadlines, and report progress effectively.

• Adapt to

changing priorities, accept constructive feedback, and take on new responsibilities as required.

Required Skills & Experience:

• Hands-on

experience or educational background in IT systems security or system administration.

• Experience

with information security incident response procedures and practices.

• Strong

understanding of enterprise IT operations and secure configuration best practices.

• Ability to

learn new technologies, processes, tools, and responsibilities quickly.

• Ability to

work independently and collaboratively within cross-functional teams.

• Experience

coordinating with multiple technical teams, business stakeholders, and vendors.

• Strong

organizational skills, including the ability to multitask, prioritize assignments, and meet deadlines.

• Intermediate

proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio, with experience using templates and formatting standards.

• Ability to

understand, retain, document, and communicate technical processes.

• Strong

written and verbal communication skills.

• Flexibility

in adapting to changing requirements, priorities, and feedback from technical and business teams.

Preferred Skills

• Prior

experience in healthcare information technology (Health IT).

• Experience

with centralized log management solutions.

• Familiarity

with security frameworks and regulatory requirements, including NIST 800-series publications and CMS ARC-AMPE.

• Experience

performing or supporting information security compliance assessments and audits.

• Experience

working in federal, state, city, or local government environments.

• Experience

working in a Security Operations Center (SOC), including alert monitoring, anomaly detection, incident triage, dashboard interpretation, and cross-functional coordination.

• Hands-on

experience with vulnerability scanning, security analysis, network firewalls, IDS/IPS, SIEM tools, and network security monitoring.

• Knowledge of

cloud security, multi-tenant environments, and vendor security management.

• Familiarity

with RMF processes and integration of security requirements into the SDLC.

Education: High school diploma with at least six years of relevant work experience.

Preferred Education & Certifications

• Bachelor’s

degree in Information Technology, Computer Science, or a related technical field, with at least three years of relevant work experience.

• Relevant

information security certifications, such as CompTIA Security+, ISC2 certifications, SANS/GIAC, CCNA Security, or equivalent credentials.