Security Analyst

Novalink Solutions LLC•West Columbia, SC

2d•Onsite

About The Position

The Security Analyst is a hands-on role in the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity (OCS), supporting active defense of the agency’s systems and networks. The role supports the establishment, implementation, and enhancement of information systems security and compliance efforts under federal, state, and agency policies and standards. It assesses and evaluates information and cyber security solutions and processes, provides technical advice on the design and implementation of secure systems and networks, guides junior Security Analysts I and II in identifying and addressing risks, and leads responses to information security issues. The analyst supports ongoing enterprise cybersecurity threat monitoring and incident response. This includes SOC monitoring, hands-on support of security tools, threat hunting, monitoring alerts, investigating incidents, gathering and analyzing evidence, and assessing anomalous activity and threats to agency resources. The role works with OCS staff, agency teams, leadership, business partners, stakeholders, and vendors to advance security and compliance risk mitigation. The position is identified as a consultant with a 36-month renewal.

Requirements

High school diploma and six years of relevant work experience; the posting also specifies six or more years of IT system security or system administration experience in its required skills section.
Experience with information security incident response procedures and practices.
Hands-on experience or educational background in IT system security or system administration.
Intermediate skills with Microsoft Word, Excel, PowerPoint, and Visio, including use of templates and style guidelines for branding consistency.
Understanding of information technology and security concepts.
Knowledge or experience with operating systems such as Android, iOS, Linux, Windows, MVS, and VMware; cloud computing; networks; hardware and software platforms; and security-related protocols.
Knowledge or experience performing vulnerability assessments, including scanning, analysis of results, and manual validation.
Experience with network firewalls, IDS/IPS technologies, network security monitoring, and SIEM systems.
Experience in information security incident response and risk management, including managing and responding to risks, threats, and incidents.
Awareness of current threats to the confidentiality, integrity, and availability of data and controls to mitigate threats.
Strong working knowledge of relevant regulatory policies, standards, procedures, and controls, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP.
Working knowledge of TCP/IP and its component protocols, with the ability to read and analyze network information using tools such as tcpdump and Wireshark.
Willingness to learn new tasks, work independently and as part of a team, and coordinate with multiple teams and vendors.
Ability to multitask, prioritize work, report status, and meet deadlines in a results-oriented environment.
Strong understanding of enterprise operations and secure best practices; ability to absorb, retain, and communicate processes.
Strong written and verbal communication skills, including accurately assessing, documenting, and reporting technical processes and routines.
Ability to adapt to change and constructive criticism and remain flexible when working with leadership and teams with varying technical and business knowledge.

Nice To Haves

Experience or knowledge developing and integrating Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
Experience or knowledge of security for multi-tenant cloud services and vendor interface management.
Understanding of defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
Experience working in a SOC environment.
Experience operating in or contributing to a SOC, responding to alerts and anomalies, creating and interpreting dashboards, and triaging cross-functional teams.
Hands-on experience securely implementing, operating, and maintaining computer systems, software, hardware, and networks.
Prior Health Information Technology experience.
Centralized log management experience.
Familiarity with security regulatory requirements and standards such as the NIST 800 series and ARC-AMPE.
Experience performing or supporting information security compliance assessments and audits.
Work or consulting experience in federal, state, city, or local government.
Bachelor’s degree in information technology, computer science, or a related technical field, with at least three years of relevant experience.
Information security certifications such as CompTIA, ISC(2), SANS GIAC, or CCNA Security, or similar.

Responsibilities

Assess and evaluate the organization’s information and cybersecurity solutions and processes.
Provide technical advice to influence the design and implementation of secure information technology systems and networks.
Guide junior Security Analyst I and II staff in identifying and addressing risks, and lead responses to information security issues.
Assist with day-to-day SOC monitoring activities, tools, and processes.
Provide hands-on support for OCS security tools.
Conduct threat hunts to search for evidence of compromise.
Monitor security technologies for alerts.
Investigate incidents, gather evidence, and analyze data.
Analyze anomalous activity and potential threats to agency-connected resources.
Collaborate with OCS staff, other agency staff, leadership, business partners, stakeholders, and vendors to support security and compliance risk mitigation.
Perform other duties as assigned.