Security Analyst - Consultant (Onsite)

Serigor•Columbia, SC

1d•Onsite

About The Position

The Security Analyst assesses and evaluates the organization’s information and cybersecurity solutions and processes, and provides technical advice to influence the design and implementation of security IT systems and networks. The analyst guides junior Security Analyst I and II staff in identifying and addressing risks and leads responses to information security issues. The role supports ongoing enterprise cybersecurity threat monitoring and incident response, including day-to-day SOC monitoring, threat hunting, alert monitoring, incident investigation, evidence gathering, and analysis of anomalous activity and potential threats. The analyst also provides hands-on support for client security tools and collaborates with agency staff, leadership, business partners, vendors, and other stakeholders on security and compliance risk mitigation. The position is onsite in Columbia, South Carolina, for a duration of 12+ months.

Requirements

At least 6 years of experience in IT system security or system administration.
Experience with incident response procedures and practices.
Intermediate skills in Microsoft Office products, including Word, Excel, PowerPoint, and Visio, including use of templates and style guidelines for branding consistency.
High school diploma with six years of relevant work experience.
Understanding of information technology and security concepts.
Experience or knowledge of operating systems such as Android, iOS, Linux, Windows, MVS, and VMware; cloud computing; networks; hardware and software platforms; and protocols as they relate to information security.
Experience or knowledge performing vulnerability assessments, including scanning, analysis of results, and manual validation.
Experience with secure networking technologies such as network firewalls and IDS/IPS, network security monitoring, and SIEM systems.
Experience in information security incident response and risk management.
Experience managing and responding to information security risks, threats, and incidents.
Awareness of current threats to confidentiality, integrity, and availability of data and controls to mitigate threats.
Strong working knowledge of applicable internal or external regulatory policies, standards, procedures, and controls, such as CMS ARC-AMPE, NIST, COBIT, and FedRAMP.
Willingness to learn and take on new tasks.
Ability to work independently and as a member of a team.
Willingness to collaborate and coordinate with multiple teams and vendors.
Ability to multitask and prioritize tasks effectively, report on assigned work status, and meet deadlines in a results-oriented environment.
Strong understanding of enterprise operations and secure best practices.
Ability to absorb, retain, and communicate processes.
Strong written and verbal communication skills.
Ability to accept changes and constructive criticism and remain flexible when working with leadership and teams with varying technical and business knowledge.

Nice To Haves

Experience or knowledge developing and integrating RMF tasks and artifacts into the System Development Life Cycle (SDLC).
Experience or knowledge in security for multi-tenant cloud services and vendor interface management.
Working knowledge of TCP/IP and its component protocols, including the ability to read and analyze traffic using tools such as tcpdump and Wireshark.
Understanding of defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
Experience working in a SOC environment.
Experience operating and contributing to a security operations center, responding to alerts and anomalies, creating and interpreting dashboards, and triaging cross-functional teams.
Hands-on experience in the secure implementation, operation, and ongoing maintenance of computer systems, software, hardware, and networks.
Prior Health Information Technology experience.
Centralized Log Management experience.
Familiarity with security regulatory requirements and standards, such as the NIST 800 series and ARC-AMPE.
Experience performing or supporting information security compliance assessments and audits.
Work or consulting experience in federal, state, city, or local government.
Bachelor’s degree in information technology, computer science, or a related technical field, with a minimum of three years of relevant work experience.
Information security certifications such as CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar.

Responsibilities

Assess and evaluate the organization’s information and cybersecurity solutions and processes.
Provide technical advisory support for the design and implementation of security IT systems and networks.
Guide junior Security Analyst I and II staff in identifying and addressing risks.
Lead responses to information security issues.
Assist with day-to-day SOC monitoring activities, tools, and processes.
Provide hands-on support for client security tools.
Conduct threat hunts for evidence of compromise.
Monitor security technologies for alerts.
Investigate incidents, gather evidence, and analyze data.
Analyze anomalous activity and potential threats to agency-connected resources.
Collaborate with client and agency staff, leadership, business partners, and other stakeholders to support security and compliance risk mitigation.
Perform other duties as assigned.