Security Analyst

Responsibilities: The agency will train the selected candidate to perform the tasks listed below: Threat Intelligence Research Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization. Position Summary: Enhance the security posture of the agency to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.

DPP is seeking a Security Analyst for an opportunity with our client in Blythewood, SC.
 
Work Location: Onsite in Blythewood, SC
Duration: 12 months with possibility of extension
Terms: W2 Contract
Candidate Location: Must be a current SC resident; no relocation allowed
 
Position Summary:

• Enhance the security posture of the agency to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.
• Availability for Saturday and Sunday Evening shifts are required as they will be part of the selected resource’s schedule after training. This is mandatory.
• Our client is seeking a candidate to fill an entry level security position with basic server or network administration skills that can be built upon.

Responsibilities:

• The agency will train the selected candidate to perform the tasks listed below:

Threat Intelligence Research

• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
• Document findings, such as new attack methods or vulnerabilities, and share with the team.
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.

Threat Hunting and Detection Rule Creation

• Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
• Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
• Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules).
• Document hunting methodologies and findings to support continuous improvement.

Log Analysis

• Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts.
• Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.

Incident Response

• Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK).
• Identify and escalate potential security threats.
• Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents.
• Document findings during incidents and contribute to containment and remediation efforts.

Documentation, Reporting, and Communication

• Create clear, detailed reports, including incident reports, after-action reviews, and process documentation.
• Deliver reports on the security posture and propose mitigation strategies.
• Draft training materials or guides to help improve organizational awareness and readiness.
• Regularly update and organize documentation to ensure accuracy and accessibility for team use.

Vulnerability Management

• Analyze reports, prioritize patching, and understand NIST best practices.

Security Awareness Training

• Develop and deliver training and assess employee awareness through simulations.

Security Automation and Scripting

• Leverage SCCM, GPO, and PowerShell for patch deployment.
• Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency.

Endpoint and Network Security

• Configure policies, analyze alerts, and manage endpoint protection.
• Understand network protocols and firewalls to strengthen the overall security posture.

Digital Forensics and Cloud Security

• Investigate security incidents and collect evidence for deeper analysis.
• Develop knowledge of cloud-specific security solutions as cloud adoption grows.

Required Skills:

• Understanding of security concepts and processes.
• Understanding of basic computer and network concepts.

Additional Skills:

• Problem-Solving: Analyze data, identify anomalies, and recommend solutions.
• Attention to Detail: Ensure accurate analysis and configuration for effective security measures.
• Ability to communicate and work effectively with a mid-size team.

Required Education and Experience:

• A High School Diploma is required at minimum.

Preferred Qualifications:

• 1+ Years of Experience in Server or Network Administration.
• 1+ Year of Experience in an IT Security Focused Role.
• Experience with SIEM and Endpoint Security Tools.
• Experience with PowerShell, Group Policy, and Endpoint Management.
• Knowledge of Vulnerability Management and Cloud Security.
• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field.

Preferred Certifications:

• GIAC Security Essentials (GSEC)
• Security+ (CompTIA)
• Network+ (CompTIA)
• GIAC Incident Handler (GCIH)

Authorized US Worker - US Citizens and those authorized to work in the US are encouraged to apply. We are unable to sponsor at this time.
 
Interested? Learn more:
Click the apply button to learn more about this position (#26-01243).
 DP Professionals (DPP) offers a range of compensation and benefits packages to our employees and their eligible dependents. DPP is a certified Woman-owned Small Business Enterprise (WBE and WOSB) with more than 25 years in the staffing industry. EOE/AA/V/D