Security Analyst – Cybersecurity & Security Operations - Contract - COlumbia, SC

Security Analyst – Cybersecurity & Security Operations
Location: Columbia, SC Onsite

Interview Process: 1 round, Virtual/Online
Duration: 12 Months
Employment Type: Contract
Experience Required: 07+ Years

Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed.

Project Scope:

We are seeking an experienced Security Analyst to support active defense and cybersecurity operations across enterprise systems and networks. This hands-on role will contribute to the establishment, implementation, and enhancement of information security and compliance initiatives in accordance with federal, state, and organizational policies and standards.

The ideal candidate will have a strong foundation in IT systems security, network security, system administration, vulnerability management, and incident response. The candidate must possess excellent analytical, communication, and problem-solving skills and be comfortable collaborating with technical teams, business stakeholders, leadership, and external vendors.

The Security Analyst will assess security solutions and processes, provide technical guidance on security system design and implementation, support security operations center (SOC) activities, and help junior analysts identify and address security risks.

Key Responsibilities:

Security Operations and Monitoring

• Assist with day-to-day security operations center (SOC) monitoring activities, tools, and processes.
  
• Provide hands-on support for security tools and technologies.
  
• Monitor security systems and technologies for alerts, anomalies, and potential threats.
  
• Conduct threat hunting activities to identify evidence of compromise across systems and networks.
  
• Investigate security incidents, gather relevant evidence, and analyze security-related data.
  
• Analyze anomalous activity and assess potential threats to connected systems and organizational resources.
  
• Support incident response activities and coordinate with relevant teams to contain and address security issues.
  

Security Risk and Vulnerability Management

• Assess and evaluate information security solutions, processes, systems, and networks.
  
• Perform vulnerability assessments, including scanning, analysis of findings, and manual validation.
  
• Identify security risks and recommend appropriate mitigation strategies.
  
• Support threat and vulnerability management activities to protect the confidentiality, integrity, and availability of organizational data.
  
• Apply defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
  
• Provide technical recommendations to influence the secure design, implementation, operation, and maintenance of information technology systems.
  
• Guide junior security analysts in identifying risks and responding to information security issues.
  

Security Compliance and Risk Assessment

• Support information security and compliance initiatives aligned with applicable federal, state, and organizational policies and standards.
  
• Apply relevant security frameworks and regulatory requirements, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP, as applicable.
  
• Assist with security compliance assessments, audits, and risk mitigation activities.
  
• Support the integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
  
• Contribute to the secure management of cloud services, multi-tenant environments, and vendor interfaces.
  

Network and Systems Security

• Apply knowledge of operating systems and technology platforms, including Windows, Linux, Android, iOS, MVS, and VMware environments.
  
• Support security monitoring and analysis across networks, hardware, software platforms, and cloud infrastructure.
  

• Analyze TCP/IP traffic and network protocols using tools such as Wireshark and tcpdump.
  
• Apply knowledge of firewalls, intrusion detection and prevention systems (IDS/IPS), network security monitoring, and Security Information and Event Management (SIEM) solutions.
  
• Support the secure implementation, operation, and ongoing maintenance of systems, software, hardware, and networks.
  

Collaboration and Reporting

• Collaborate with cybersecurity staff, technical teams, business units, leadership, stakeholders, and vendors to support security and compliance objectives.
  
• Communicate security findings, incident updates, risks, and mitigation recommendations clearly.
  
• Prepare and maintain security documentation, reports, dashboards, and other required deliverables.
  
• Manage multiple assignments, prioritize tasks, meet deadlines, and report progress effectively.
  
• Adapt to changing priorities, accept constructive feedback, and take on new responsibilities as required.
  

Required Skills & Experience:

1. Hands-on experience or educational background in IT systems security or system administration.
   
2. Experience with information security incident response procedures and practices.
   
3. Strong understanding of enterprise IT operations and secure configuration best practices.
   
4. Ability to learn new technologies, processes, tools, and responsibilities quickly.
   
5. Ability to work independently and collaboratively within cross-functional teams.
   
6. Experience coordinating with multiple technical teams, business stakeholders, and vendors.
   
7. Strong organizational skills, including the ability to multitask, prioritize assignments, and meet deadlines.
   
8. Intermediate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio, with experience using templates and formatting standards.
   
9. Ability to understand, retain, document, and communicate technical processes.
   
10. Strong written and verbal communication skills.
    
11. Flexibility in adapting to changing requirements, priorities, and feedback from technical and business teams.
    

Preferred Skills

1. Prior experience in healthcare information technology (Health IT).
   
2. Experience with centralized log management solutions.
   
3. Familiarity with security frameworks and regulatory requirements, including NIST 800-series publications and CMS ARC-AMPE.
   
4. Experience performing or supporting information security compliance assessments and audits.
   
5. Experience working in federal, state, city, or local government environments.
   
6. Experience working in a Security Operations Center (SOC), including alert monitoring, anomaly detection, incident triage, dashboard interpretation, and cross-functional coordination.
   
7. Hands-on experience with vulnerability scanning, security analysis, network firewalls, IDS/IPS, SIEM tools, and network security monitoring.
   
8. Knowledge of cloud security, multi-tenant environments, and vendor security management.
   
9. Familiarity with RMF processes and integration of security requirements into the SDLC.
   

Education:
High school diploma with at least six years of relevant work experience.

Preferred Education & Certifications

• Bachelor’s degree in Information Technology, Computer Science, or a related technical field, with at least three years of relevant work experience.
  
• Relevant information security certifications, such as CompTIA Security+, ISC2 certifications, SANS/GIAC, CCNA Security, or equivalent credentials.