IT - SCDHHS - Security Analyst - Consultant

Elite WorkForce•Columbia, SC

1d•Onsite

About The Position

The Security Analyst is a hands-on consultant role within the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity (OCS), supporting active defense of the agency’s systems and networks. The role supports the establishment, implementation, and enhancement of information systems security and compliance efforts in accordance with federal, state, and agency policies and standards. The analyst assesses the organization’s information and cyber security solutions and processes, and provides technical advice to inform the design and implementation of secure information technology systems and networks. The analyst supports Security Operations Center (SOC) monitoring and tools, conducts threat hunts, monitors security technologies, investigates incidents, gathers and analyzes evidence, and assesses anomalous activity and potential threats. The role collaborates with OCS staff, agency staff, leadership, business partners, vendors, and other stakeholders on security and compliance risk mitigation. The analyst also guides junior Security Analyst I and II staff in identifying and addressing risks and leading responses to information security issues. This is a 12-month contract with possible extension. The position is fully onsite, and candidates must be South Carolina residents; relocation is not allowed. The hiring process includes one virtual/online interview round. A seven-year standard background check and credit history check are required, along with the listed agreements and forms.

Requirements

Hands-on experience or educational background in IT system security or system administration.
Experience with incident response procedures and practices.
Willingness to learn and take on new tasks.
Ability to work independently and as part of a team.
Willingness to collaborate and coordinate with multiple teams and vendors.
Ability to multitask, prioritize tasks, and report on assigned work status and meet deadlines in a results-oriented environment.
Intermediate skills with Microsoft Office products, including Word, Excel, PowerPoint, and Visio, and working with templates and style guidelines.
Strong understanding of enterprise operations and secure best practices.
Ability to absorb, retain, and communicate processes.
Strong written and verbal communication skills.
Ability to accept changes and constructive criticism and remain flexible when working with leadership and teams with varying technical and business knowledge.
High school diploma and six years of relevant work experience.
Must be a South Carolina resident; relocation is not allowed.
Must complete a seven-year standard background check and credit history check and the required agreements and forms.

Nice To Haves

Prior health information technology experience.
Centralized log management experience.
Familiarity with security regulatory requirements and standards, such as NIST 800 series and ARC-AMPE.
Experience performing or supporting information security compliance assessments and audits.
Work or consulting experience in federal, state, city, or local government.
Bachelor’s degree in information technology, computer science, or a related technical field, with a minimum of three years of relevant work experience.
Information security certifications such as CompTIA, ISC(2), SANS GIAC, or CCNA Security, or similar.
Experience or knowledge of operating systems such as Android, iOS, Linux, Windows, MVS, or VMware; cloud computing; networks; hardware and software platforms; and security-related protocols.
Experience or knowledge performing vulnerability assessments, including scanning, analyzing results, and manual validation.
Experience with secure networking technologies such as network firewalls and IDS/IPS, network security monitoring, and SIEM systems.
Experience in information security incident response and risk management.
Knowledge of threat and vulnerability management and current threats to data confidentiality, integrity, and availability and controls to mitigate them.
Working knowledge of applicable regulatory policies, standards, procedures, and controls, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP.
Experience or knowledge integrating RMF tasks and artifacts into the SDLC.
Experience or knowledge of security for multi-tenant cloud services and vendor interface management.
Working knowledge of TCP/IP and its component protocols, including ability to read and analyze traffic using tools such as tcpdump and Wireshark.
Understanding of defense-in-depth principles such as secure system configuration, network segmentation, and malicious code protection.
Experience working in a SOC environment, including responding to alerts and anomalies, creating and interpreting dashboards, and triaging cross-functional teams.
Hands-on experience with secure implementation, operation, and ongoing maintenance of computer systems, software, hardware, and networks.

Responsibilities

Assess and evaluate the organization’s information and cybersecurity solutions and processes.
Provide technical advisory support for the design and implementation of security information technology systems and networks.
Guide junior analysts in identifying and addressing risks and lead responses to information security issues.
Assist with day-to-day SOC monitoring activities, tools, and processes.
Provide hands-on support for OCS security tools.
Conduct threat hunts to search for evidence of compromise.
Monitor security technologies for alerts.
Investigate incidents, gather evidence, and analyze data.
Analyze anomalous activity and potential threats to agency-connected resources.
Collaborate with OCS staff, agency staff, leadership, business partners, vendors, and other stakeholders to support security and compliance risk mitigation.
Perform other duties as assigned.