Remote/Local Security Analyst

InnoSoul•Columbia, SC

1d•Onsite

About The Position

The Security Analyst supports security operations by monitoring and correlating security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources. The role investigates suspicious activity and security incidents, determines root cause and impact, escalates critical incidents, and produces incident documentation and recommendations. The position also contributes to SOC playbooks, detection tuning, threat hunting, and the integration of threat intelligence feeds. The candidate will work with engineering teams, SOC staff, agency staff, and customers to support security operations and resolve issues. The position is based in Columbia, South Carolina, with a stated duration of 12 months. Onsite work is preferred over hybrid work and full-time remote work; onsite work may be needed. Interviews are virtual/online, with a possible second in-person round.

Requirements

At least 2 years of experience with security monitoring and incident response.
At least 2 years of experience with the MITRE ATT&CK framework.
At least 2 years of experience creating dashboards and reporting.
An associate degree in an information technology or information security-related field; four years of relevant work experience may be substituted for education.
Two years of experience supporting large SOC operations.
Candidate is local to Columbia, South Carolina, or a surrounding South Carolina city.

Nice To Haves

Experience with the Palo Alto Cortex XSIAM/XDR platform.
Knowledge of Linux, network administration, and network design.
Experience administering firewalls, VPN technology, Active Directory, and intrusion detection/prevention systems.
CISSP, CISA, CISO, or equivalent advanced security certification.
Additional relevant certifications such as CEH, OSCP, or GPEN.
Vendor certifications related to information security.

Responsibilities

Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify attack patterns, threats, and incidents.
Analyze suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context.
Create incident reports, timelines, post-incident summaries, lessons-learned documentation, and remediation and prevention recommendations.
Investigate reported phishing, malware infections, and potential policy violations; advise users and teams on containment and recovery.
Recommend SOC playbook and workflow updates based on investigations; fine-tune detection rules, alert thresholds, and correlation logic.
Collaborate with engineering teams to configure and tune monitoring tools.
Integrate threat intelligence feeds into workflows and proactively hunt for threats using current tactics, techniques, and procedures.
Serve as a customer-facing subject matter expert, demonstrate DIS services, and resolve issues.
Document SOC processes, runbooks, and troubleshooting steps.
Coordinate with engineering, SOC, and agency staff to meet goals.
Perform other duties as needed.