Junior Security Analyst

About the Role

This is an entry-level security position with a focus on enhancing the security posture of the South Carolina Department of Motor Vehicles (SCDMV). The selected candidate will be trained to perform various security tasks.

Key Responsibilities

• Threat Intelligence Research
• Monitor and analyze threat intelligence feeds to identify emerging threats.
• Document findings (e.g., new attack methods, vulnerabilities) and share with the team.
• Use open-source intelligence (OSINT) tools for data gathering on risks and adversaries.
• Threat Hunting and Detection Rule Creation
• Conduct proactive searches for suspicious behavior in network and endpoint activity.
• Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
• Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries, Defender for Endpoint rules).
• Document hunting methodologies and findings.
• Log Analysis
• Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Escalate findings (e.g., anomalous IP addresses, unauthorized access) to senior analysts.
• Maintain a log of recurring patterns or anomalies.
• Incident Response
• Assist in the initial triage of security incidents using response frameworks (e.g., NIST, MITRE ATT&CK).
• Identify and escalate potential security threats.
• Gather and analyze relevant evidence to determine incident scope and severity.
• Document findings during incidents and contribute to containment and remediation efforts.
• Documentation, Reporting, and Communication
• Create clear, detailed reports (incident reports, after-action reviews, process documentation).
• Deliver reports on security posture and propose mitigation strategies.
• Draft training materials to improve organizational awareness.
• Regularly update and organize documentation for team accessibility.
• Vulnerability Management
• Analyze reports, prioritize patching, and understand NIST best practices.
• Security Awareness Training
• Develop and deliver training and assess employee awareness through simulations.
• Security Automation and Scripting
• Leverage SCCM, GPO, and PowerShell for patch deployment.
• Automate tasks beyond SCCM, GPO, and PowerShell for efficiency.
• Endpoint and Network Security
• Configure policies, analyze alerts, and manage endpoint protection.
• Understand network protocols and firewalls.
• Digital Forensics and Cloud Security
• Investigate security incidents and collect evidence for deeper analysis.
• Develop knowledge of cloud-specific security solutions.

Requirements & Tech Stack

• Basic server or network administration skills.
• Understanding of security concepts and processes.
• Understanding of basic computer and network concepts.
• Problem-Solving skills: Analyze data, identify anomalies, and recommend solutions.
• Attention to Detail for accurate analysis and configuration.
• Ability to communicate and work effectively with a mid-size team.

Qualifications

• Preferred: 1+ Year of Experience in an IT Security Focused Role.
• Preferred: Experience with SIEM and Endpoint Security Tools.
• Preferred: Experience with PowerShell, Group Policy, and Endpoint Management.
• Preferred: Knowledge of Vulnerability Management and Cloud Security.
• Preferred: Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Preferred: 1+ Years of Experience in Server or Network Administration.
• Preferred: GIAC Security Essentials (GSEC) certification.
• Preferred: Security+ (CompTIA) certification.
• Preferred: Network+ (CompTIA) certification.

Work Location & Employment

• Fully Onsite (NO flexibility for hybrid or remote work).
• Candidate must be a CURRENT SC resident. No relocation allowed.
• W2 ONLY resumes accepted.