Security Analyst

DPP•Blythewood, SC

20h•Onsite

About The Position

DPP is seeking a Security Analyst for an opportunity with our client in Blythewood, SC. This is an onsite, 12-month contract with the possibility of extension. The role requires the candidate to be a current SC resident, with no relocation allowed. The primary goal is to enhance the agency's security posture to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems. Availability for Saturday and Sunday evening shifts is mandatory after training. This is an entry-level security position with the potential to build upon basic server or network administration skills.

Requirements

Understanding of security concepts and processes.
Understanding of basic computer and network concepts.
Problem-Solving: Analyze data, identify anomalies, and recommend solutions.
Attention to Detail: Ensure accurate analysis and configuration for effective security measures.
Ability to communicate and work effectively with a mid-size team.
A High School Diploma is required at minimum.

Nice To Haves

1+ Years of Experience in Server or Network Administration.
1+ Year of Experience in an IT Security Focused Role.
Experience with SIEM and Endpoint Security Tools.
Experience with PowerShell, Group Policy, and Endpoint Management.
Knowledge of Vulnerability Management and Cloud Security.
Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
GIAC Security Essentials (GSEC)
Security+ (CompTIA)
Network+ (CompTIA)
GIAC Incident Handler (GCIH)

Responsibilities

Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization. Document findings, such as new attack methods or vulnerabilities, and share with the team. Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks. Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats. Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules). Document hunting methodologies and findings to support continuous improvement.
Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs). Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts. Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.
Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK). Identify and escalate potential security threats. Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents. Document findings during incidents and contribute to containment and remediation efforts.
Create clear, detailed reports, including incident reports, after-action reviews, and process documentation. Deliver reports on the security posture and propose mitigation strategies. Draft training materials or guides to help improve organizational awareness and readiness. Regularly update and organize documentation to ensure accuracy and accessibility for team use.
Analyze reports, prioritize patching, and understand NIST best practices.
Develop and deliver training and assess employee awareness through simulations.
Leverage SCCM, GPO, and PowerShell for patch deployment. Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency.
Configure policies, analyze alerts, and manage endpoint protection. Understand network protocols and firewalls to strengthen the overall security posture.
Investigate security incidents and collect evidence for deeper analysis. Develop knowledge of cloud-specific security solutions as cloud adoption grows.