Cybersecurity Operations Lead - Contract - Columbia, SC

SUNSHINE ENTERPRISE USA LLC•Columbia, SC

2d•Onsite

About The Position

The Cybersecurity Operations Lead will help mature and advance the organization’s Security Operations Center (SOC) capabilities. Working directly with the Chief Information Security Officer (CISO), the role will drive innovation and strengthen threat detection, monitoring, and incident response across enterprise systems, including on-premises and cloud-based infrastructure and critical applications. The successful candidate will provide technical leadership, oversee security incident response, mentor SOC analysts, support advanced threat hunting, and continuously improve security operations processes and procedures. This is an ongoing project with aggressive timelines. Candidates must be productive, flexible, self-directed, and comfortable in a fast-paced environment where responsibilities may evolve. Team members are expected to deliver quality work with minimal supervision. The position is onsite in Columbia, South Carolina, and candidates must be South Carolina residents; relocation is not allowed. The contract duration is 12 months. The interview process consists of one virtual/online round.

Requirements

10+ years of IT experience working with Windows, Linux, and web-based applications.
5+ years of experience in enterprise infrastructure design and deployment.
5 years of related experience in a SOC Lead capacity.
Broad understanding of enterprise cybersecurity operations, threat monitoring, and incident response.
Experience leading or guiding Security Operations analysts.
Strong understanding of security incident handling, threat identification, and response processes.
Ability to work independently and manage multiple deliverables within defined deadlines.
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline.
Must hold one or a combination of the following certifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or CompTIA Security+.
Must be a South Carolina resident; relocation is not allowed.

Nice To Haves

Experience identifying, testing, and leading remediation efforts related to the OWASP Top Ten.
Experience identifying, testing, and leading remediation efforts related to the CWE/SANS Top 25 Most Dangerous Software Errors.
Previous experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar compliance requirements.
Experience working with enterprise Governance, Risk, and Compliance (eGRC) systems.
Cloud certification, such as CASP+.
Network security certifications.

Responsibilities

Drive innovation and maturity of Security Operations Center capabilities.
Serve as an escalation point for SOC Analyst I, II, and III.
Provide leadership, mentorship, and technical guidance to SOC analysts.
Lead and mentor the Security Operations team, ensuring analysts are trained and motivated.
Assist with staffing Security Operations personnel.
Lead security team projects and continuous improvement initiatives.
Oversee the identification, analysis, and response to security incidents.
Ensure rapid incident containment, investigation, and resolution.
Perform threat identification and analyze cybersecurity risks to the Medicaid Enterprise.
Support the implementation and advancement of continuous monitoring and incident response processes.
Assist with advanced threat hunting to identify potential attacker presence within the environment.
Review and refine security playbooks, processes, and alerts to identify improvement opportunities.
Work with IT, application development, and business teams to advance enterprise security initiatives.
Collaborate with compliance teams to maintain audit-ready status.
Support cybersecurity threat monitoring and incident response across on-premises and cloud-based systems.
Help evaluate and implement effective security practices, tools, and technologies.