| Location | Columbia, SC |
Position Title: Security Analyst
Position Location: Hybrid - Columbia, South Carolina
About the RoleWe're a security consulting company that helps clients deploy, optimize, and sustain their security tools. We're looking for a Security Analyst who enjoys hands-on technical work and wants to build deep expertise across a leading security stack: Tenable, Palo Alto Cortex (XDR, XSIAM, and XSOAR), CrowdStrike, and Cribl.You'll work directly with client teams to deploy platforms, assess the health of existing environments, and troubleshoot issues, translating technical findings into clear recommendations. Experience with these tools is a plus, but not required. We'll train you, and we care most about your technical foundation, problem-solving skills, and ability to work well with clients.What You'll Do
Learn and become proficient in our core technology partners, and use that knowledge to deliver client engagements:
Tenable: scanner and agent deployment, scan policy design, credentialed scanning, and reporting configurationPalo Alto Cortex XDR: agent rollout and upgrades, endpoint policy and exception configuration, behavioral indicator of compromise (BIOC) and alert tuning, and agent health and connectivity validationPalo Alto Cortex XSIAM: data source onboarding and ingestion, parsing and data modeling rules, XQL queries, correlation rule and analytics tuning, broker VM deployment, and platform health monitoringPalo Alto Cortex XSOAR: integration configuration, playbook development and tuning, incident layouts and automation, engine deployment, content pack management, and troubleshooting failed integrations and playbook runsCrowdStrike: sensor deployment, prevention and detection policy configuration, host group management, and sensor health validationCribl: source and destination setup, pipeline and routing design, data reduction and enrichment, and worker group health
Support and execute deployments, from kickoff and requirements gathering through configuration, testing, and handoffPerform health checks on client environments, identifying misconfigurations, coverage gaps, outdated versions, and performance issuesTroubleshoot technical issues such as agent connectivity, data ingestion failures, scan errors, and integration problems, working to root cause and resolutionDeliver clear findings, recommendations, and remediation roadmaps to technical and non-technical stakeholdersCreate documentation including design documents, runbooks, as-built diagrams, and knowledge transfer materialsTrain client staff on tool usage and operational best practicesTrack time, manage tasks, and keep project status current for engagement managersContribute to internal best practices, reusable deployment templates, and health check methodologiesSupport clients through escalations and help identify opportunities for follow-on work
What We're Looking ForRequired
Solid foundation in cybersecurity concepts (vulnerability management, endpoint security, logging, and incident response)Strong automation mindsetWorking knowledge of Windows and Linux operating systems and core networking (TCP/IP, DNS, firewalls, proxies, certificates)Strong troubleshooting skills and a methodical approach to isolating problemsExcellent written and verbal communication, with comfort presenting to clientsAbility to manage multiple tasks and prioritize across client engagementsWillingness to learn new technologies quickly and work independentlyWillingness to travel occasionally for client engagements
Preferred
Hands-on experience with Tenable, Palo Alto Cortex (XDR, XSIAM, or XSOAR), CrowdStrike, or CriblPrior experience in consulting, professional services, managed services, or customer-facing technical rolesExperience deploying or administering security tools in enterprise environmentsFamiliarity with SIEM, SOAR, EDR/XDR, or log pipeline conceptsScripting or automation experience (Python, PowerShell, Bash, or API usage), particularly Python for playbook and integration developmentExperience with cloud platforms (AWS, Azure, or GCP)Relevant certifications (e.g., Security+, CySA+, Tenable, CrowdStrike, Palo Alto Networks, or Cribl certifications)Bachelor's degree in cybersecurity, information technology, computer science, or equivalent experienceResidence in or near Columbia, SC
Physical Requirements:
Prolonged periods of sitting at a desk and working on a computerMust be able to lift up to 15 pounds at times.