Security Analyst Needed in South Carolina

About the Role

Pellera Technologies is a security consulting company focused on helping clients deploy, optimize, and sustain their security tools. We are seeking a Security Analyst interested in hands-on technical work and developing deep expertise across a leading security stack. You will collaborate directly with client teams to deploy platforms, assess existing environments, and troubleshoot issues, translating technical findings into clear recommendations. Experience with the specified tools is beneficial but not required, as training will be provided. We prioritize a strong technical foundation, problem-solving abilities, and client interaction skills.

Key Responsibilities

• Learn and become proficient in core technology partners and utilize this knowledge for client engagements.
• Tenable: scanner and agent deployment, scan policy design, credentialed scanning, and reporting configuration.
• Palo Alto Cortex XDR: agent rollout and upgrades, endpoint policy and exception configuration, behavioral indicator of compromise (BIOC) and alert tuning, and agent health and connectivity validation.
• Palo Alto Cortex XSIAM: data source onboarding and ingestion, parsing and data modeling rules, XQL queries, correlation rule and analytics tuning, broker VM deployment, and platform health monitoring.
• Palo Alto Cortex XSOAR: integration configuration, playbook development and tuning, incident layouts and automation, engine deployment, content pack management, and troubleshooting failed integrations and playbook runs.
• CrowdStrike: sensor deployment, prevention and detection policy configuration, host group management, and sensor health validation.
• Cribl: source and destination setup, pipeline and routing design, data reduction and enrichment, and worker group health.
• Support and execute deployments, encompassing kickoff, requirements gathering, configuration, testing, and handoff.
• Perform health checks on client environments, identifying misconfigurations, coverage gaps, outdated versions, and performance issues.
• Troubleshoot technical issues such as agent connectivity, data ingestion failures, scan errors, and integration problems, working towards root cause analysis and resolution.
• Deliver clear findings, recommendations, and remediation roadmaps to both technical and non-technical stakeholders.
• Create documentation, including design documents, runbooks, as-built diagrams, and knowledge transfer materials.
• Train client staff on tool usage and operational best practices.
• Track time, manage tasks, and maintain up-to-date project status for engagement managers.
• Contribute to internal best practices, reusable deployment templates, and health check methodologies.
• Support clients through escalations and help identify opportunities for follow-on work.

Requirements & Tech Stack

• Solid foundation in cybersecurity concepts: vulnerability management, endpoint security, logging, and incident response.
• Strong automation mindset.
• Working knowledge of Windows and Linux operating systems.
• Working knowledge of core networking: TCP/IP, DNS, firewalls, proxies, certificates.
• Strong troubleshooting skills and a methodical approach to problem isolation.
• Excellent written and verbal communication skills, with comfort presenting to clients.
• Ability to manage multiple tasks and prioritize across client engagements.
• Willingness to learn new technologies quickly and work independently.
• Willingness to travel occasionally for client engagements.

Qualifications

• Hands-on experience with Tenable, Palo Alto Cortex (XDR, XSIAM, or XSOAR), CrowdStrike, or Cribl is preferred.
• Prior experience in consulting, professional services, managed services, or customer-facing technical roles is preferred.
• Experience deploying or administering security tools in enterprise environments is preferred.
• Familiarity with SIEM, SOAR, EDR/XDR, or log pipeline concepts is preferred.
• Scripting or automation experience (Python, PowerShell, Bash, or API usage), particularly Python for playbook and integration development, is preferred.
• Experience with cloud platforms (AWS, Azure, or GCP) is preferred.
• Relevant certifications (e.g., Security+, CySA+, Tenable, CrowdStrike, Palo Alto Networks, or Cribl certifications) are preferred.
• Bachelor’s degree in cybersecurity, information technology, computer science, or equivalent experience is preferred.
• Residence in or near Columbia, SC.

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer.
• Ability to lift up to 15 pounds at times.