Security Analyst

Security Analyst

The Office of Cybersecurity ensures theconfidentiality, integrity, and availability of SCDHH’s systems and services.The ideal candidate should have strong hands-on experience with data networkdesign best practices, routing and switching protocols, network security bestpractices, and on-premises and/or cloud networking environments. This rolerequires someone who can work independently on technical tasks while alsosupporting senior analysts on more complex cybersecurity and networkinitiatives.

• Hands-on technical role reporting directly to the Office of Cybersecurity SOC Lead.
• Support SCDHHS leadership, business units, partners, and vendors with day-to-day cybersecurity operations.
• Experience with security and compliance frameworks such as CMS ARC-AMPE, HIPAA, NIST, and FISMA RMF is strongly desired.
• Perform repeatable security processes supporting compliant enterprise architectures.
• Support security requirements for multi-tenant cloud environments and vendor integrations.
• Apply secure network design principles across enterprise environments.
• Hands-on experience with Windows, macOS, and Linux operating systems.
• Strong understanding of switching, routing, enterprise firewalls, and network auditing.
• Experience with IDS/IPS platforms and network security monitoring.
• Experience with SIEM platforms, preferably QRadar or Splunk.
• Experience with vulnerability scanning tools such as Nessus and Qualys.
• Cloud infrastructure security experience is preferred.
• Assist with improving and maturing network security and compliance solutions.
• Investigate, analyze, and respond to daily network security alerts.
• Perform security assessments for proposed firewall and infrastructure changes.
• Conduct technical analysis supporting network security planning and engineering.
• Review connectivity, website-blocking, and firewall-rule requests to identify potential security risks.
• Analyze on-premises and cloud networks for potential threats and vulnerabilities.
• Develop and review network traffic reports to identify violations involving approved ports, protocols, and services.
• Monitor emerging cyber threats and recommend appropriate countermeasures.
• Collaborate with agency teams to implement and maintain appropriate security controls.
• Support cloud and on-premises network changes, enhancements, and security projects.
• Help maintain compliance with ARC-AMPE,HIPAA, and SCDIS-200 requirements.
• Assist with security KPI development, reporting, and trend monitoring.
• Participate in firewall configuration reviews and ruleset recertification.
• Provide network and cybersecurity best-practice guidance to technical teams.
• Perform additional Security OperationsCenter (SOC) responsibilities as assigned.

Requirements

Education and Certifications:

• Bachelor’s degree in Computer Science,Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• A network/security-focused certification, such as PCNSE (Palo Alto Networks Certified Network Security Engineer) orCCNA (Cisco Certified Network Associate).

Required Skills:

• Approximately 3–5 years of hands-on experience in network design, implementation, or support.
• Hands-on experience in IT security or system administration.
• Working knowledge of secure network design and security architecture.
• Knowledge of security compliance tools, data protection, and access-control models.
• Ability to analyze and interpret security logs, alerts, and network telemetry.
• Proficiency with Microsoft Office tools.

Preferred Skills:

• Experience working in regulated environments.
• Experience supporting Health IT and/or state government environments.
• Familiarity with FISMA, NIST, CMSARC-AMPE, and HIPAA security and privacy standards.
• Experience with cloud network security controls, particularly in Microsoft Azure or AWS environments
• CISSP or Security+

Benefits