IT - SCDHHS - Security Analyst - Consultant

Elite WorkForce•Columbia, SC

1d•Onsite

About The Position

The State of South Carolina is seeking a Security Analyst consultant for an ongoing project with the SCDHHS Office of Cybersecurity. The Office of Cybersecurity ensures the confidentiality, integrity, and availability of SCDHHS systems and services. This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead. The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations, contribute independently on technical tasks, and support senior analysts on complex initiatives. The contract duration is 12 months, with the possibility of extension. The position is fully onsite in South Carolina, and candidates must be South Carolina residents; relocation is not allowed. The role focuses on network security operations, assessments, engineering, compliance, and support for on-premise and cloud environments. The analyst will investigate network alerts, assess proposed firewall and infrastructure changes, analyze traffic and network activity for threats or standards violations, help mature security and compliance solutions, and collaborate with agency teams on security controls and network projects.

Requirements

Approximately 3–5 years of hands-on experience in network design, implementation, or support.
Hands-on experience in IT security or system administration.
Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models.
Ability to analyze logs, alerts, and network telemetry.
Proficiency with Microsoft Office tools.
Bachelor of Science degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience.
A network-security-centric certification such as PCNSE or CCNA.
Hands-on experience with data network design best practices, routing and switching protocols, network security best practices, and on-premise and/or cloud networking environments.

Nice To Haves

Experience working in regulatory environments.
Experience supporting health IT or state government.
Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards.
Cloud network security controls, including Azure or AWS.
Experience with SIEM platforms such as QRadar or Splunk.
Cloud infrastructure security experience.
CISSP or Security+ certification.
Experience with Windows, macOS, and Linux operating systems; switching and routing; enterprise firewalls; network auditing; IDS/IPS platforms; network security monitoring; and vulnerability scanning tools such as Nessus or Qualys.

Responsibilities

Assist in maturing network security and compliance solutions.
Investigate and respond to daily network alerts.
Perform network security assessments for proposed firewall and infrastructure changes.
Conduct technical analysis for network security planning and engineering.
Review connectivity, website block, and firewall rule requests to assess whether they present elevated risk to the agency.
Analyze on-premise and cloud networks for potential threats.
Develop, review, and analyze network traffic reports for violations of agency standards governing Ports, Protocols, and Services.
Monitor emerging threat vectors and recommend countermeasures.
Collaborate with other agency areas to implement security controls.
Support cloud and on-premise network changes and enhancement projects.
Ensure compliance with ARC-AMPE, HIPAA, and SCDIS-200.
Assist with KPI creation and trend report monitoring.
Participate in firewall configuration reviews and ruleset recertification.
Provide guidance on best practices to technical teams.
Perform additional SOC duties as assigned.