Cybersecurity Security Analyst

• Assess and evaluate information security solutions, systems, networks, and operational processes.
• Support enterprise cybersecurity threat monitoring and incident response activities.
• Monitor security technologies, investigate alerts, and analyze anomalous activity and potential threats.
• Conduct threat hunts to identify possible evidence of compromise across agency-connected resources.
• Investigate security incidents, collect evidence, analyze data, and support incident resolution.
• Assist with daily security operations center (SOC) monitoring activities, tools, and processes.
• Provide hands-on support for security tools and technologies.
• Conduct vulnerability assessments, including vulnerability scanning, results analysis, and manual validation.
• Identify security risks and recommend appropriate mitigation strategies.
• Support the secure design, implementation, operation, and maintenance of IT systems, software, hardware, and networks.
• Evaluate network security controls, including firewalls, intrusion detection and prevention systems (IDS/IPS), and security monitoring technologies.
• Support security information and event management (SIEM) systems and centralized log management activities.
• Assist with information security compliance assessments, audits, and documentation.
• Apply relevant security standards, policies, procedures, and regulatory requirements.
• Provide technical guidance to junior security analysts and support risk identification and remediation efforts.
• Collaborate with cybersecurity staff, IT teams, business units, leadership, vendors, and other stakeholders.
• Document technical processes, investigations, findings, risks, and recommendations accurately.
• Support continuous improvement of cybersecurity tactics, techniques, procedures, and operational effectiveness.
• Perform other related duties as assigned., Candidates selected for consideration must be prepared to complete applicable screening and onboarding requirements, including:
• Seven-year standard background check.
• Credit history check.
• Employment eligibility verification through E-Verify, as applicable.
• Required temporary worker and confidentiality agreements.
• Information technology use agreement.
• Resource employment validation documentation.
• Required healthcare agency confidentiality documentation.

Candidate submission package must include:

• Updated resume showing the candidate’s full legal first and last name.
• Valid Right to Represent (RTR).
• Cover letter.
• Required state cover sheet.
• Confirmation that the candidate meets the South Carolina residency and onsite work requirements.

Submission files should follow the required naming convention: AttachmentName_PostingID_LastName_FirstName.

Why Consider This Opportunity?

• Opportunity to contribute to enterprise cybersecurity and threat defense.
• Hands-on exposure to security monitoring, incident response, and vulnerability management.
• Work with technical teams and stakeholders on information security and compliance initiatives.
• Potential contract extension based on business needs and performance.

This hands-on role requires strong technical knowledge of IT systems security, network security, vulnerability management, and incident response. The ideal candidate will be a proactive problem solver with excellent communication skills and the ability to collaborate with technical teams, business stakeholders, leadership, and vendors., * High school diploma or equivalent.

• At least 6 years of relevant experience in IT system security or system administration.
• Experience with information security incident response procedures and practices.
• Strong understanding of information technology, cybersecurity concepts, and enterprise security operations.
• Knowledge of operating systems, including Windows, Linux, Android, iOS, MVS, and VMware environments.
• Understanding of network security, hardware, software platforms, cloud computing, and communication protocols.
• Knowledge of vulnerability assessment, threat management, and security risk mitigation.
• Familiarity with network firewalls, IDS/IPS technologies, security monitoring, and SIEM systems.
• Intermediate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio.
• Ability to work with templates, documentation standards, and formatting guidelines.
• Excellent written and verbal communication skills, including the ability to document and report technical findings clearly.
• Ability to work independently and collaboratively in a team environment.
• Strong analytical, organizational, problem-solving, and prioritization skills.
• Ability to manage multiple assignments and meet deadlines in a results-oriented environment., * Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related technical field, with at least three years of relevant experience.
• Information security certifications such as CompTIA Security+, ISC2 certifications, SANS/GIAC, CCNA Security, or equivalent.
• Previous experience in healthcare information technology.
• Experience with centralized log management.
• Familiarity with security frameworks, regulatory requirements, and standards, including NIST 800-series publications and ARC-AMPE.
• Experience supporting information security compliance assessments and audits.
• Previous experience working or consulting with federal, state, city, or local government agencies.
• Experience working in a security operations center (SOC).
• Experience monitoring security alerts, investigating anomalies, developing or interpreting dashboards, and coordinating cross-functional incident response.
• Knowledge of risk management frameworks (RMF) and integration of RMF tasks and artifacts into the system development life cycle (SDLC).
• Experience with cloud security, multi-tenant environments, and vendor security management.
• Understanding of TCP/IP and its component protocols, including packet analysis using tools such as Wireshark and tcpdump.
• Knowledge of defense-in-depth principles, secure system configuration, network segmentation, and malicious code protection.

Technical Skills and Security Knowledge

Candidates should possess experience or knowledge in the following areas:

• Cybersecurity Operations: SOC monitoring, security alerts, anomaly detection, threat hunting, and incident investigation.
• Incident Response: Incident handling, evidence collection, threat analysis, escalation, and remediation support.
• Network Security: Firewalls, IDS/IPS, network security monitoring, TCP/IP, packet analysis, and network segmentation.
• Vulnerability Management: Vulnerability scanning, assessment, validation, prioritization, and risk mitigation.
• Security Monitoring: SIEM platforms, centralized logging, security dashboards, and log analysis.
• Security Compliance: NIST, applicable healthcare security requirements, regulatory standards, compliance assessments, and audit support.
• Systems Administration: Windows, Linux, VMware, mobile operating systems, hardware, software, and enterprise infrastructure.
• Cloud Security: Cloud environments, multi-tenant services, secure configurations, and vendor interfaces.
• Documentation and Reporting: Technical documentation, incident reports, compliance records, and Microsoft Office applications.

Additional Skills and Competencies

• Demonstrated initiative and a willingness to learn new technologies and take on new responsibilities.
• Ability to adapt to changing priorities, processes, and business requirements.
• Strong collaboration skills when working with technical teams, business stakeholders, leadership, and external vendors.
• Ability to communicate technical security issues to audiences with varying levels of technical knowledge.
• Strong attention to detail when assessing, documenting, and reporting security processes.
• Ability to accept constructive feedback and remain flexible in a changing work environment.
• Commitment to enterprise security best practices and continuous improvement.