Security Analyst – Cybersecurity & Security Operations - Contract - COlumbia, SC

SUNSHINE ENTERPRISE USA LLC•Irmo, SC

8d•Onsite

About The Position

The Security Analyst supports active defense and cybersecurity operations across enterprise systems and networks. This hands-on role contributes to establishing, implementing, and enhancing information security and compliance initiatives in accordance with federal, state, and organizational policies and standards. The analyst assesses security solutions and processes, provides technical guidance on security system design and implementation, supports SOC activities, and helps junior analysts identify and address security risks. The role requires a foundation in IT systems security, network security, system administration, vulnerability management, and incident response, along with analytical, communication, and problem-solving skills. The analyst collaborates with technical teams, business stakeholders, leadership, and external vendors, and prepares security documentation, reports, dashboards, and other deliverables. This is a 12-month contract position based onsite in Columbia, South Carolina. Candidates must be current South Carolina residents; relocation is not allowed. The interview process consists of one virtual/online round.

Requirements

At least seven years of experience is required.
Hands-on experience or educational background in IT systems security or system administration.
Experience with information security incident response procedures and practices.
Strong understanding of enterprise IT operations and secure configuration best practices.
Ability to learn new technologies, processes, tools, and responsibilities quickly.
Ability to work independently and collaboratively within cross-functional teams.
Experience coordinating with multiple technical teams, business stakeholders, and vendors.
Strong organizational skills, including the ability to multitask, prioritize assignments, and meet deadlines.
Intermediate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio, with experience using templates and formatting standards.
Ability to understand, retain, document, and communicate technical processes.
Strong written and verbal communication skills.
Flexibility in adapting to changing requirements, priorities, and feedback from technical and business teams.
High school diploma with at least six years of relevant work experience.
Must be a current South Carolina resident; relocation is not allowed.

Nice To Haves

Prior experience in healthcare information technology (Health IT).
Experience with centralized log management solutions.
Familiarity with security frameworks and regulatory requirements, including NIST 800-series publications and CMS ARC-AMPE.
Experience performing or supporting information security compliance assessments and audits.
Experience working in federal, state, city, or local government environments.
Experience working in a SOC, including alert monitoring, anomaly detection, incident triage, dashboard interpretation, and cross-functional coordination.
Hands-on experience with vulnerability scanning, security analysis, network firewalls, IDS/IPS, SIEM tools, and network security monitoring.
Knowledge of cloud security, multi-tenant environments, and vendor security management.
Familiarity with RMF processes and integration of security requirements into the SDLC.
Bachelor’s degree in Information Technology, Computer Science, or a related technical field, with at least three years of relevant work experience.
Relevant information security certifications, such as CompTIA Security+, ISC2 certifications, SANS/GIAC, CCNA Security, or equivalent credentials.

Responsibilities

Assist with day-to-day security operations center (SOC) monitoring activities, tools, and processes.
Provide hands-on support for security tools and technologies.
Monitor security systems and technologies for alerts, anomalies, and potential threats.
Conduct threat hunting to identify evidence of compromise across systems and networks.
Investigate security incidents, gather relevant evidence, and analyze security-related data.
Analyze anomalous activity and assess potential threats to connected systems and organizational resources.
Support incident response activities and coordinate with relevant teams to contain and address security issues.
Assess and evaluate information security solutions, processes, systems, and networks.
Perform vulnerability assessments, including scanning, analysis of findings, and manual validation.
Identify security risks and recommend appropriate mitigation strategies.
Support threat and vulnerability management activities to protect the confidentiality, integrity, and availability of organizational data.
Apply defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
Provide technical recommendations for the secure design, implementation, operation, and maintenance of IT systems.
Guide junior security analysts in identifying risks and responding to information security issues.
Support information security and compliance initiatives aligned with applicable federal, state, and organizational policies and standards.
Apply relevant security frameworks and regulatory requirements, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP, as applicable.
Assist with security compliance assessments, audits, and risk mitigation activities.
Support integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
Contribute to the secure management of cloud services, multi-tenant environments, and vendor interfaces.
Support security monitoring and analysis across networks, hardware, software platforms, and cloud infrastructure.
Analyze TCP/IP traffic and network protocols using tools such as Wireshark and tcpdump.
Apply knowledge of firewalls, IDS/IPS, network security monitoring, and SIEM solutions.
Support secure implementation, operation, and ongoing maintenance of systems, software, hardware, and networks.
Collaborate with cybersecurity staff, technical teams, business units, leadership, stakeholders, and vendors to support security and compliance objectives.
Communicate security findings, incident updates, risks, and mitigation recommendations clearly.
Prepare and maintain security documentation, reports, dashboards, and other required deliverables.
Manage multiple assignments, prioritize tasks, meet deadlines, and report progress effectively.
Adapt to changing priorities, accept constructive feedback, and take on new responsibilities as required.