Security Analyst (Project Lead)
Analytics
Cyber Security
Cybersecurity Operations
Cybersecurity Tools
Endpoint Security
Incident Management
Incident Response
Information Security
Information Technology (IT)
InfoSec
Project Lead
Project Management
Security
Security Analyst
Security Detection Engineering
Security Information And Event Management
Security Monitoring
Security Operations
Threat Intelligence
Job Description
Concordant, LLC is supporting a statewide cybersecurity program and is hiring a Tier 2 SOC Analyst to serve as a Security Analyst Project Lead. The role focuses on security monitoring, threat detection, incident response, and investigations, with coordination across state agencies. This position is based in Columbia, SC (hybrid), with the expectation to work Eastern Time business hours, and fully remote candidates may be considered with the ability to come on-site when needed.
Key Responsibilities
- Review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence to identify complex attack patterns, emerging threats, and security incidents
- Conduct deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context
- Produce incident reports, timelines, and post-incident summaries, contributing to lessons learned and remediation recommendations
- Investigate user-reported phishing, malware infections, and potential policy violations, providing guidance on containment and recovery
- Recommend updates to SOC playbooks and workflows, tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve coverage
- Partner with engineering teams to configure and tune monitoring tools, integrate new threat intelligence feeds, and hunt for threats using current TTPs
- Act as a customer-facing subject matter expert for centralized security services, resolving agency issues as needed
- Document SOC processes, runbooks, and troubleshooting steps for operations
- Coordinate with engineering, SOC, and agency staff to support program goals
Required Qualifications
- 2+ years of experience in security monitoring and incident response
- 2+ years of experience with the MITRE ATT&CK framework
- 2+ years of experience creating dashboards and reports
- 2+ years of experience supporting large SOC operations
- Associate’s degree in information technology, information security, or a related field (4 years of relevant work experience may substitute for the degree)
- Ability to work Eastern Time business hours
- Ability to pass background checks including drug, driving record, credit, criminal, E-Verify, and SLED
Technologies
- SIEM, EDR, IDS/IPS, threat intelligence, MITRE ATT&CK
- Palo Alto Cortex XSIAM/XDR
- Linux, Active Directory, VPN, firewalls
- TTPs
Benefits
- 401(k) and 401(k) matching
- Dental insurance, Vision insurance, Health insurance, Health savings account
- Employee assistance program, Employee discount
- Paid time off
- Retirement plan
Interview Process
- First-round interviews via Microsoft Teams with cameras on
- Finalists may complete an in-person interview prior to selection
Role Details
- Job Type: Full-time, W2 Contract (12 months, with possible extension)
- Location/Work Schedule: Hybrid remote in Columbia, SC 29201; must be able to commute; possibility for remote; must work EST business hours
- Pay: $46.00 per hour (up to $46.00 per hour)
About Concordant
Concordant LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA HUBZone-certified firm headquartered in Laramie, Wyoming. The company provides professional IT and cybersecurity services to federal and state government clients.