Security Analyst-Project Lead

The Security Analyst-Project Lead role supports security incident response operations for a client in a newly created, full-time contract position. This hybrid role is based in Columbia, SC 29228.

Role Overview

In this position, you will monitor and analyze security events, validate and investigate incidents, and lead improvements to SOC workflows. You will also work as a customer-facing subject matter expert, coordinating with SOC and engineering teams to meet operational goals.

Location and Employment Type

• Location: Columbia, SC 29228 (hybrid)
• Employment: Full-time contract

Compensation

• Rate: USD 64 - 68 per hour

Responsibilities

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence to identify complex attack patterns, emerging threats, and security incidents
• Conduct deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required
• Produce detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and prevention
• Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal and external teams on containment and recovery actions
• Recommend updates to SOC playbooks and workflows, including fine-tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
• Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned; integrate new threat intelligence feeds into workflows; proactively hunt for threats using up-to-date TTPs
• Act as a customer-facing SME by demonstrating capabilities, resolving issues, and communicating the value of services provided
• Document SOC processes, runbooks, and troubleshooting steps
• Coordinate with engineering, SOC, and agency staff as needed to meet goals
• Perform other duties as needed

Required Qualifications

• 2+ years of experience with security monitoring and incident response
• 2+ years of experience with the MITRE ATT&CK framework
• 2+ years of experience with dashboard creation and reporting
• Education: Associate’s degree in an information technology or information security related field
• Substitution: 4 years of relevant work experience may be substituted in lieu of education
• 2 years of experience supporting large SOC operations
• Candidate is local to Columbia, SC or a surrounding city in South Carolina
• Only work authorizations not requiring sponsorship now or in the future will be considered. Local candidates only, please.

Technologies and Tools

• SIEM, EDR, IDS/IPS
• Threat intelligence
• MITRE ATT&CK framework
• Palo Alto Cortex XSIAM/XDR
• Linux
• Active Directory
• Firewalls, VPN technology
• Intrusion detection and prevention systems

Preferred Qualifications

• Experience with the Palo Alto Cortex XSIAM/XDR platform
• Knowledge of Linux, network administration, and network design
• Experience in administration of firewalls, VPN technology, Active Directory, and intrusion detection and prevention systems

Benefits

• Medical, dental, and vision insurance
• 401k retirement account access
• Paid sick leave and/or other paid time off as provided by applicable law

Physical Demands

• Ability to safely and successfully perform essential job functions consistent with the ADA and other federal, state and local standards
• Sedentary work involving sitting or remaining stationary most of the time, with occasional need to move around the office to attend meetings
• Ability to conduct repetitive tasks on a computer using a mouse, keyboard, and monitor

Reasonable Accommodation

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, direct your inquiries to [email protected] or (888) 824-8111.