> Markdown version of [/jobs/ext/4216730-security-analyst-project-lead](https://www.wearedevelopers.com/jobs/ext/4216730-security-analyst-project-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst - Project Lead - **Company:** novalink Solutions llc - **Location:** West Columbia, SC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, ARM Architecture, Cyber Security, Linux, Monitoring of Systems, Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Network Planning and Design, Network Administration, Anti-Phishing, Security Information and Event Management, Mitre Att&ck, Firewalls (Computer Science), Information Technology, Drilldown, 3-tier Architectures - **Published:** October 22, 2026 - **Apply:** https://www.careerjet.com/jobad/us1f1b6aebfad0eab3ca682ddb8cabc171 ## About the Role * 2+ Years of Experience with Security Monitoring and Incident Response. * 2+ Years of Experience with MITRE ATT&CK framework. * 2+ Years of Experience with dashboard creation and reporting. Preferred Skills (rank in order of Importance): * Experience with the Palo Alto Cortex XSIAM/XDR platform. * Knowledge of Linux, network administration and network design. * Experience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems. * Candidate is local to Columbia, SC or surrounding city in South Carolina Required Education/Certifications: * Associate's degree in an information technology or information security related field * Four years of relevant work experience may be substituted in lieu of education * Two years of experience in supporting large soc operations, Importance): * 2+ Years of Experience with Security Monitoring and Incident Response. * 2+ Years of Experience with MITRE ATT&CK framework. * 2+ Years of Experience with dashboard creation and reporting. Preferred Skills (rank in order of Importance): * Experience with the Palo Alto Cortex XSIAM/XDR platform. * Knowledge of Linux, network administration and network design. * Experience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems. * Candidate is local to Columbia, SC or surrounding city in South Carolina Required Education/Certifications: * Associate's degree in an information technology or information security related field * Four years of relevant work experience may be substituted in lieu of education * Two years of experience in supporting large soc operations. Preferred Education/Certifications: * CISSP, CISA, CISO or equivalent advanced security certification. * Additional relevant certifications (e.g., CEH, OSCP, GPEN). * Vendor certifications related to information security. ## Description Daily Duties / Responsibilities: PREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN WORK ONSITE OVER HYBRID AND OVER FULL-TIME REMOTE (ON-SITE AS NEEDED). * Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. * Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required. * Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures. * Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions. * Recommend updates to SOC playbooks and workflows based on real-world INVESTIGATIONS, fine-tune detection rules. Alert thresholds, and correlation logic to reduce false positives and improve threat coverage. * Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to date tactics, techniques, and procedures (TTPs) * Serve as a customer-facing SME, "selling" the value of DIS services by demonstrating capabilities and resolving issues. * Document processes, runbooks, and troubleshooting steps related to SOC operations. * Coordinate with engineering, SOC, and agency staff as needed to meet goals. * Other duties as needed., threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. * Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required. * Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures. * Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions. * Recommend updates to SOC playbooks and workflows based on real-world INVESTIGATIONS, fine-tune detection rules. Alert thresholds, and correlation logic to reduce false positives and improve threat coverage. * Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to date tactics, techniques, and procedures (TTPs) * Serve as a customer-facing SME, "selling" the value of DIS services by demonstrating capabilities and resolving issues. * Document processes, runbooks, and troubleshooting steps related to SOC operations. * Coordinate with engineering, SOC, and agency staff as needed to meet goals. * Other duties as needed.