> Markdown version of [/jobs/ext/4221510-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/4221510-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Spartanburg County
- **Location:** Spartanburg, SC, United States
- **Experience:** Experienced
- **Salary:** $71,421.0 - $91,062.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Information Technology Audit, Microsoft Security Essentials, Network Administration, Anti-Phishing, Security Information and Event Management, Software Vulnerability Management, Information Technology, Splunk, Network Server, SentinelOne Expertise, Vulnerability Analysis
- **Published:** October 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=9efb82c24db097f9

## About the Role

· Bachelor's degree in cybersecurity, information systems, computer science, criminal justice with cyber emphasis, or a related field.

· Three years of experience in security operations, vulnerability management, systems/network administration with security duties, IT audit, risk analysis, or a comparable field.

· Equivalent combinations of education, certifications, and directly relevant experience may be considered.

Preferred Qualifications

· Security+, CySA+, SSCP, GSEC, Microsoft security, SentinelOne, Tenable, Splunk or other SIEM, or comparable certification/experience.

· Experience coordinating with an MDR/SOC, public safety, courts, government, healthcare, finance, or another regulated environment.

· Strong writing, documentation, customer service, and analytical skills.

Knowledge, Skills, and Abilities

· Security monitoring, incident triage, vulnerability management, risk tracking, identity/access review, reporting, documentation, and customer communication.

· Ability to analyze incomplete information, identify patterns, maintain confidentiality, and follow through on corrective actions.

Working Relationships and Service Expectations

· Works collaboratively with County Administration, department heads, elected officials, IT staff, vendors, and external partners.

· Communicates professionally, respectfully, and clearly with technical and nontechnical stakeholders.

· Protects confidential, security-sensitive, personnel, legal, and operational information.

· Supports a customer-service culture focused on partnership, accountability, timely communication, documentation, and continuous improvement.

## Description

Performs daily cybersecurity monitoring, analysis, vulnerability tracking, risk documentation, incident coordination, security awareness support, and metrics reporting. The position serves as the County's internal operational liaison to the managed SOC/MDR provider and helps ensure that alerts, vulnerabilities, access reviews, and corrective actions are assigned and completed.

Essential Functions

· Reviews and validates security alerts, MDR/SOC escalations, endpoint events, identity events, firewall events, and other security telemetry.

· Coordinates incident tickets, escalation, evidence collection, status updates, containment actions, and remediation follow-up.

· Operates the vulnerability-management process, including scan scheduling, result validation, asset assignment, remediation tracking, exception documentation, and reporting.

· Maintains security inventories for endpoints, servers, critical systems, privileged accounts, vendors, applications, and external assets.

· Performs recurring access reviews, privileged-account reviews, service-account reviews, and vendor-access reviews.

· Develops dashboards, metrics, trend reports, risk summaries, and monthly executive reporting inputs.

· Supports phishing simulation, security awareness, department outreach, tabletop exercises, and policy communications.

· Assists with security assessments, audit requests, cyber-insurance evidence, vendor reviews, and project security requirements.

· Documents procedures, playbooks, escalation matrices, analyst guides, and knowledge articles.

· Tracks corrective actions from incidents, assessments, vulnerability scans, audits, and risk reviews.

· Participates in an on-call or escalation rotation as assigned.

The duties listed are representative and not exhaustive. The employee may be required to perform other job-related duties consistent with the position's purpose and classification.