IT Security Analyst – Entry Level

Innosoft Corporation•Cayce, SC

1d•Onsite

About The Position

The South Carolina Department of Motor Vehicles (SCDMV) is seeking an Entry-Level IT Security Analyst to join their IT Security Team. This role will focus on strengthening the agency’s overall security posture, safeguarding critical systems and data, reducing security risks, and supporting a security-focused IT environment. The analyst will receive training to perform assigned security responsibilities and apply basic server or network administration skills as a foundation for cybersecurity tasks. The position involves monitoring threat intelligence, conducting threat hunting, analyzing logs, assisting with incident response, managing vulnerabilities, and contributing to security awareness training and documentation.

Requirements

High School Diploma is required
Minimum GIAC Security Essentials (GSEC)
CompTIA Security+
CompTIA Network+
GIAC Certified Incident Handler (GCIH)
Understanding of security concepts and processes.
Understanding of basic computer and network concepts.
CURRENT SC resident.
At least 6 months of valid work authorization (Citizen, GC, EAD, OPT-EAD, H4-EAD)

Nice To Haves

1+ year of experience in an IT security-focused role.
Experience with SIEM and endpoint security tools.
Experience with PowerShell, Group Policy (GPO), and endpoint management.
Knowledge of vulnerability management and cloud security.
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
1+ year of experience in server or network administration.
Ability to analyze data, identify anomalies, and recommend appropriate solutions.
Ability to perform accurate analysis and configuration to support effective security measures.
Ability to communicate clearly and work effectively within a mid-sized team environment.

Responsibilities

Support the DMV Security Team in day-to-day cybersecurity activities.
Receive training to perform assigned security responsibilities.
Apply basic server or network administration skills as a foundation for cybersecurity responsibilities.
Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
Document new attack methods, vulnerabilities, and other threat findings.
Share relevant threat intelligence findings with the security team.
Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
Utilize threat feeds to support threat-hunting activities.
Investigate suspicious activity across network and endpoint environments.
Stay current on emerging cybersecurity threats.
Collaborate with senior analysts to refine and test detection rules.
Assist with SIEM queries and Microsoft Defender for Endpoint detection rules.
Document threat-hunting methodologies and findings to support continuous improvement.
Review and interpret firewall, endpoint, and server logs.
Identify indicators of compromise (IOCs).
Identify anomalous IP addresses, unauthorized access attempts, and other suspicious activity.
Escalate identified security findings to senior analysts.
Maintain records of recurring patterns and anomalies for long-term tracking and analysis.
Assist with the initial triage of cybersecurity incidents.
Follow incident response frameworks such as NIST and MITRE ATT&CK.
Identify and escalate potential security threats.
Gather relevant evidence during security incidents.
Analyze logs and alert data to determine the scope and severity of incidents.
Document findings during incident investigations.
Contribute to incident containment and remediation efforts.
Create clear and detailed incident reports.
Prepare after-action reviews following security incidents.
Develop and maintain security process documentation.
Deliver reports on the organization’s security posture.
Propose appropriate security mitigation strategies.
Draft training materials and security guides to improve organizational awareness and readiness.
Regularly update and organize documentation to maintain accuracy and accessibility for team use.
Analyze vulnerability reports.
Prioritize patching and remediation activities.
Understand and apply NIST best practices related to vulnerability management.
Develop security awareness training.
Deliver security awareness training to employees.
Conduct or support security awareness simulations.
Assess employee security awareness through simulations.
Leverage SCCM for patch deployment.
Use Group Policy (GPO) to support patch deployment and security administration.
Use PowerShell for patch deployment and automation.
Automate tasks beyond SCCM, GPO, and PowerShell to increase operational efficiency.
Configure endpoint security policies.
Analyze endpoint security alerts.
Manage and support endpoint protection.
Apply knowledge of network protocols to security activities.
Apply knowledge of firewalls to strengthen network security.
Support efforts to improve the organization’s overall security posture.
Investigate cybersecurity incidents.
Collect evidence related to security incidents for deeper analysis.
Support digital forensic investigation activities.
Develop knowledge of cloud-specific security solutions.
Support security requirements as the organization’s cloud adoption grows.