Security Analyst

About the Role

This role supports Our Client’s Office of Cybersecurity on a critical, ongoing project. The Security Analyst will work onsite in a collaborative our client environment, providing expertise in protecting information assets and ensuring compliance with state security policies. You will be responsible for monitoring, analyzing, and responding to security events, helping to safeguard sensitive data across the organization. The position offers a 12‑month contract with the potential for extension, allowing you to make a measurable impact on the state’s cyber‑defense posture.

Key Responsibilities

• Monitor security information and event management (SIEM) platforms to detect and investigate potential threats.
• Conduct vulnerability assessments and penetration testing to identify weaknesses in systems and networks.
• Perform incident response activities, including containment, eradication, and post‑incident analysis.
• Develop and maintain security documentation such as policies, procedures, and incident reports.
• Collaborate with IT and business teams to implement security controls and remediation plans.
• Provide risk assessments and recommendations aligned with NIST, ISO 27001, and state cybersecurity frameworks.
• Generate regular security metrics and dashboards for senior leadership.
• Participate in security awareness training and educate staff on best practices.

Required Skills & Experience

• Minimum 3‑5 years of hands‑on experience in information security or cybersecurity analysis.
• Strong understanding of security frameworks (NIST, ISO 27001) and regulatory compliance requirements.
• Experience conducting vulnerability scans, risk assessments, and incident response.
• Proficiency in interpreting logs, alerts, and network traffic to identify malicious activity.
• Excellent analytical and problem‑solving abilities with strong written and verbal communication skills.
• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+ are preferred.

Tools & Technologies

• SIEM solutions (e.g., Splunk, IBM QRadar, ArcSight) for real‑time monitoring.
• Vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS).
• Network analysis utilities (Wireshark, NetFlow).
• Endpoint detection and response (EDR) platforms.
• Ticketing and workflow systems (ServiceNow, JIRA).
• Scripting languages (PowerShell, Python) for automation of security tasks.

Work Schedule & Duration

• Contract length: 12 months with possibility of extension.
• Work arrangement: Fully onsite at the Columbia location.
• Candidate must be a resident of South Carolina; relocation is not permitted.

Interview Process

The interview process typically includes 1‑2 virtual rounds conducted online. Expect a screening interview followed by a technical interview focused on security concepts, tools, and scenario‑based problem solving.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States