South Carolina

Cybersecurity Jobs in South Carolina

41 jobs found

Include remote jobs

Today

Senior Cybersecurity Engineer

Phoenix Operations Group Charleston, SC

Charleston, SC

Today

Full time Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Phoenix Operations Group is seeking a Senior Cybersecurity Engineer to design, implement, and safeguard secure enterprise and cloud systems supporting critical government and national security missions. This role focuses on security architecture, vulnerability management, hardening, RMF/ATO support, and compliance activities in government environments.

Key Responsibilities

Design, implement, and maintain cybersecurity solutions across enterprise and cloud environments.
Perform security assessments, vulnerability analysis, and remediation activities.
Implement security controls aligned with NIST 800-53 and applicable government standards.
Support Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes.
Conduct security configuration reviews and execute system hardening efforts.
Implement and maintain DISA Security Technical Implementation Guides (STIGs).
Use vulnerability management tools such as ACAS and Tenable.
Conduct security architecture reviews and technical risk assessments.
Collaborate with systems engineers, cloud architects, and DevSecOps teams.
Develop cybersecurity documentation and remediation plans.
Support continuous monitoring and security compliance initiatives.

Required Qualifications

Extensive experience in cybersecurity engineering, information assurance, or systems security.
Strong understanding of NIST 800-53, RMF, and government security requirements.
Experience with vulnerability assessment and remediation.
Hands-on experience implementing DISA STIGs and performing security hardening.
Experience with ACAS, Tenable, or comparable security assessment tools.
Understanding of enterprise networking, operating systems, and cloud security.
Strong analytical, troubleshooting, and technical documentation skills.
Experience supporting DoD or Intelligence Community environments.
Experience securing AWS, Azure Government, or classified cloud environments.
Relevant certifications such as CISSP, CASP+, Security+, or other relevant certifications.
Experience with eMASS, Xacta, or other RMF platforms.
Experience with DevSecOps and automated security controls.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or equivalent professional experience.
Senior-level cybersecurity engineering experience required.

Technologies

NIST 800-53
Risk Management Framework (RMF)
Authorization to Operate (ATO)
DISA Security Technical Implementation Guides (STIGs)
ACAS
Tenable
eMASS
Xacta
AWS
Azure Government
CISSP
CASP+
Security+
DevSecOps

Benefits

Medical, dental, and vision insurance with premiums fully paid by the company.
Short-term disability, long-term disability, and life insurance, fully paid by the company.
Automatic 10% company contribution to the 401(k); no matching contribution is required.
Four weeks of paid time off annually.
Eleven paid holidays per year.
Paid birthday leave.
Upfront and annually recurring referral bonuses.
Bonuses for contributing to company GitHub projects.
Paid training, certifications, and professional enrichment opportunities.

Security Clearance

Must possess an active U.S. Department of Defense (DoD) security clearance. Specific clearance level and access requirements are subject to contract requirements.

Location and Work Setting

Charleston, SC (onsite).

View full job page →

1d ago

Senior Analyst, Cybersecurity

LPL Financial Fort Mill, SC

Fort Mill, SC

1d ago

$93k - $155k/yr Full time Senior Cybersecurity Operations Cybersecurity Risk Assessment

Apply Now

Job Description

LPL Financial is seeking a Senior Analyst, Cybersecurity to support cybersecurity engagement work that strengthens advisor protection, reduces risk, and improves cybersecurity maturity across the advisor population. In this Fort Mill, SC (hybrid) role, you will provide escalation support, lead risk assessment activities, and help shape incident response guidance in collaboration with Cybersecurity, Technology, Compliance, and other stakeholders.

What you’ll do

Act as an escalation point for complex advisor cybersecurity inquiries, incidents, and risk-related concerns.
Respond to advisor cybersecurity questions via shared mailboxes, inbound calls, and executive-level interactions.
Perform detailed risk assessments and deliver actionable recommendations to help advisors mitigate cybersecurity threats.
Make outbound calls to advisors to facilitate incident response, remediation activity, and information gathering for escalated investigations.
Build trusted relationships with advisors and business partners to proactively drive cybersecurity awareness and risk reduction.
Lead cybersecurity awareness initiatives, campaigns, and outreach programs aimed at improving cybersecurity maturity across the advisor population.
Identify emerging cybersecurity threats, industry trends, and advisor risk patterns, then recommend proactive mitigation strategies.
Lead cross-functional projects involving Cybersecurity, Technology, Legal, Compliance, and Operations teams.
Support strategic planning to enhance advisor cybersecurity services, processes, and tools.
Analyze operational metrics and trends to recommend improvements in service delivery and cybersecurity effectiveness.
Develop, create, review, evaluate, and continuously improve cybersecurity training materials, presentations, communications, and awareness content.
Facilitate instructor-led training sessions, webinars, workshops, and presentations for advisors, clients, and internal stakeholders.
Ensure educational content stays aligned with evolving cybersecurity threats, regulatory requirements, and organizational policies.
Serve as a subject matter expert for advisor cybersecurity education and awareness programs.
Coordinate advisor-related cybersecurity incident response activities and support investigations involving phishing, account compromise, malware, and other cyber threats.
Collaborate with Cybersecurity teams to identify root causes, assess impacts, and create remediation guidance.
Evaluate security trends, incident data, and threat intelligence to identify systemic risks and improvement opportunities.
Assist in developing and maintaining advisor-focused security controls, standards, and best practices.
Drive continuous improvement by reviewing and optimizing workflows, procedures, and service models.
Create, maintain, and govern standard operating procedures, playbooks, and knowledge management documentation.
Recommend enhancements to cybersecurity tools, processes, reporting capabilities, and advisor-facing services.
Support audits, compliance reviews, and risk assessments as needed.
Provide mentoring, guidance, and knowledge sharing to Analyst I and Analyst II team members.
Assist management with onboarding, training, and development for new team members.
Lead team projects and workstreams while promoting collaboration and operational excellence.
Operate as a recognized subject matter expert within the Advisor Security organization.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Business, Technology, or related field.
3+ years of experience in cybersecurity, information security, or cyber incident response.
Experience managing cybersecurity incidents, investigations, and remediation efforts.
Strong understanding of multiple information security domains: Identity and Access Management (IAM); Multi-Factor Authentication (MFA); Network Security; Security Awareness and Training; Data Protection and Encryption; Threat Intelligence; Risk Management and Regulatory Compliance.
Familiarity with phishing simulation platforms, endpoint security technologies, and cybersecurity monitoring tools.

Technologies

Identity and Access Management (IAM)
Multi-Factor Authentication (MFA)
Phishing simulation platforms
Endpoint security technologies
Cybersecurity monitoring tools

Compensation

USD 92,906 - 154,809 per year.

Benefits

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off

Certifications and preferences

Security+ (preferred)
CISSP (or pursuing)
CISM
GIAC certifications
Certified Cybersecurity Practitioner (CC)

Work authorization

This position does not offer work authorization sponsorship now or in the future.
Applicants must have valid U.S. work authorization that does not require employer sponsorship.

Interview process

LPL will only communicate with a job applicant directly from an @lplfinancial.com email address.
LPL will never conduct an interview online or in a chatroom forum.
During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.
Questions about the application process can be directed to LPL’s Human Resources Solutions Center at (855) 575-6947.

View full job page →

2d ago

Senior Engineer, Cybersecurity

LPL Financial Fort Mill, SC

Fort Mill, SC

2d ago

$101k - $168k/yr Full time Senior Cybersecurity Advisory Cybersecurity Operations

Apply Now

Job Description

LPL Financial is hiring a Senior Engineer, Cybersecurity to strengthen the security posture of its advisor community. In this hybrid role based in Fort Mill, SC, you will lead advisor cybersecurity engagement, support security operations, and run education initiatives designed to reduce risk.

You will serve as a trusted escalation point for complex advisor questions and incidents, coordinate response activities with cybersecurity teams, and help drive continuous improvement across the Advisor Security program. The role also emphasizes proactive threat awareness, long-term mitigation, and measurable program effectiveness.

Core Responsibilities

Act as an escalation point for complex advisor cybersecurity inquiries, incidents, and risk-related concerns.
Partner with advisors and business stakeholders to promote cybersecurity best practices and adoption of security controls.
Coordinate with cybersecurity teams on advisor-related incident response activities, including phishing, account compromise, malware, and related cyber threats.
Participate in incident triage, root cause analysis, remediation planning, and resolution activities.
Partner with Cybersecurity and Technology teams to identify and implement long-term solutions that reduce recurring security issues.
Support timely resolution of advisor cybersecurity incidents while maintaining effective stakeholder communication.
Lead cybersecurity awareness campaigns, advisor outreach initiatives, and risk reduction programs.
Identify emerging threats, industry trends, and advisor security risks, and recommend proactive mitigation strategies.
Lead strategic initiatives that enhance advisor cybersecurity services, processes, tools, and operational effectiveness.
Analyze program, incident, and advisor engagement metrics to identify trends, measure effectiveness, and drive continuous improvement.
Develop and maintain cybersecurity training materials, communications, presentations, and awareness content.
Facilitate webinars, workshops, training sessions, and advisor-facing cybersecurity education programs.
Ensure educational content aligns with evolving threats, regulatory requirements, and organizational policies.
Serve as a subject matter expert for advisor cybersecurity awareness and education initiatives.
Develop and maintain standard operating procedures, playbooks, knowledge articles, and operational documentation.
Drive continuous improvement initiatives focused on enhancing advisor experience, service delivery, and cybersecurity outcomes.
Support audits, compliance reviews, risk assessments, and governance activities.
Recommend enhancements to cybersecurity tools, reporting capabilities, processes, and advisor-facing services.
Partner with Cybersecurity, Technology, Compliance, Legal, Risk Management, and Operations teams to advance advisor security initiatives.
Collaborate with security operations, engineering, identity management, and endpoint security teams on risk reduction efforts.
Participate in knowledge transfer, stakeholder engagement, and program governance activities.
Provide mentorship, guidance, and knowledge sharing to junior team members.
Support onboarding, training, and professional development efforts.
Lead projects, workstreams, and process improvement initiatives.
Serve as a recognized cybersecurity subject matter expert within the Advisor Security organization.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Business Technology, or a related field.
5+ years of experience in cybersecurity engineering, information security, security operations, or cyber incident response.
2+ years of experience supporting cybersecurity programs, advisor-facing services, or client-facing technology environments.
1+ year leading cybersecurity incidents, investigations, remediation activities, and cross-functional response efforts.
Strong understanding of cybersecurity domains including:
- Endpoint Security & Device Management
- Multi-Factor Authentication (MFA)
- Security Awareness & Training
- Data Protection & Encryption
- Threat Intelligence
- Risk Management & Regulatory Compliance
Experience within financial services or another regulated industry.
Experience supporting advisor-facing, customer-facing, or client-facing cybersecurity programs.
Experience with phishing simulation platforms, cybersecurity awareness tools, endpoint security technologies, and cybersecurity monitoring solutions.
Experience analyzing security metrics, operational trends, and program effectiveness.

Preferred Industry Certifications

CISSP (or actively pursuing)
Security+
CISM
GIAC Certifications
ISC2 Certified in Cybersecurity (CC)
CRISC

Technologies

Multi-Factor Authentication (MFA)

Benefits

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off

Core Competencies

Strong ability to communicate technical concepts and cybersecurity risks to both technical and non-technical audiences.
Cybersecurity Risk Management
Security Operations & Incident Response
Advisor Security Consulting
Security Awareness & Education
Security Controls & Technology Solutions
Cybersecurity Governance & Compliance
Stakeholder Engagement & Relationship Management
Operational Excellence & Continuous Improvement
Program Leadership & Strategic Execution

Location: Fort Mill, SC (hybrid)
Compensation: USD 100,631 - 167,787 per year
Minimum Experience: 5 years

View full job page →

6d ago

Cybersecurity Tools Analyst

Sentar Charleston, SC

Charleston, SC

6d ago

Full time Cybersecurity Operations Cybersecurity Tools Endpoint Security

Apply Now

Job Description

Sentar’s Cybersecurity Tools Analyst role (Charleston, SC, hybrid) supports the Marketplace Cyber Support team within RMED, backed by the Defense Health Agency (DHA). You will help cybersecurity staff across the DHA enterprise network by addressing compliance, sustainment, and protection needs for information systems, including specialized medical equipment and applications. This position also includes a strong culture of employee ownership, where initiative and continuous improvement are encouraged.

Responsibilities

In this role, you will analyze security outputs and use agency tools to translate findings into actionable configuration and compliance work.

Review and interpret information system vulnerability scan results using agency assessment tools (for example, ACAS/Nessus), and implement configuration changes aligned to organizational requirements.
Analyze Host-Based Security System (HBSS) and/or Endpoint Security Solution (ESS) outputs and configurations to identify what actions are needed.
Interpret MECM outputs and determine necessary next steps.
Apply basic IP sub-netting concepts to support security and network understanding.
Use compliance and authorization reporting environments such as eMASS, CMRS, and Phoenix to troubleshoot and resolve gaps related to coverage, versioning, documentation, and execution.
Cross-check results across tools and reporting systems (ACAS, ESS, MECM, CMRS, Phoenix, Splunk, and eMASS) to identify inconsistencies or shortfalls within the context of the Med-COI Zone Architecture.
Coordinate with system POCs and review authorization boundary diagrams, architecture diagrams, hardware/software inventories, IP address assignments, Med-COI Zone taxonomy, and related artifacts.
Partner with system POCs on tool configuration and outputs, explaining compliance requirements, assisting toward compliance outcomes, and providing training on tool use.
Apply NIST, DoD, and DHA security requirements, including NIST SP 800-53 controls, DISA Security Technical Implementation Guides (STIGs), and Security Requirements Guides (SRGs).
Support the creation and ongoing maintenance of SOPs used by the Cyber Support Tool SMEs.

Requirements

Clearance Level: Secret
Education and Experience: Technical Bachelors degree with 6 years of technical experience, or 10 years of technical experience without a degree.
DoD 8570: IAT Level II certification (examples include CCNA Security, Security+ CE, CISSP, etc.).
Demonstrated experience with ACAS.
Demonstrated experience with HBSS/ESS.
Demonstrated experience with MECM.
Demonstrated experience with IP subnets.
Demonstrated experience with Splunk.
Familiarity with CMRS (familiarity with Phoenix is a plus).
Familiarity with NIST SP 800-53, DISA STIGs, and SRGs.
Familiarity with eMASS or similar RMF tool(s).
Familiarity with Armis or similar tools.
Familiarity with CrowdStrike is a plus.

Tools and Technologies

ACAS, Nessus
HBSS, ESS
MECM
eMASS, CMRS, Phoenix
Splunk
NIST SP 800-53
DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs)
Med-COI Zone Architecture
Armis, CrowdStrike

Benefits

Voluntary Medical, Dental, Vision with Flexible Spending Plan options
Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
Group Term Life, Short-Term, and Long-Term Disability provided by Sentar to all qualifying employees
Generous 401(k) match
Competitive PTO plan that graduates quickly with years of service
Other leave programs; holiday schedule along with bereavement, maternity, jury, and military duty
Tuition reimbursement
Professional development reimbursement
Recognition and Awards programs

Benefits at Sentar

Sentar’s employee ownership model helps attract top talent and gives employees the freedom to take initiative and drive meaningful improvements. Sentar also supports a thriving and inclusive work environment through an extensive benefits package designed to support employee and family well-being. Employee ownership is the foundation of the culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

View full job page →

16d ago

Security Analyst

Intellibee Columbia, SC

Columbia, SC

16d ago

Full time Cloud Platforms Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Intellibee is hiring a hands-on Security Analyst to support day-to-day cybersecurity operations and network security monitoring in a role aligned to the Office of Cybersecurity SOC lead. Based onsite in Columbia, SC, the analyst will help investigate alerts, assess security posture for network and firewall changes, and support compliance efforts across the agency.

This position partners with SCDHHS leadership, business units, partners, and vendors to mature network security and compliance solutions, including technical analysis and reporting that supports operational standards.

Responsibilities

Serve as a hands-on technical contributor reporting to the Office of Cybersecurity SOC lead.
Support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations.
Help mature network security and compliance solutions.
Investigate and respond to daily network alerts.
Perform network security assessments for proposed firewall and infrastructure changes.
Conduct technical analysis for network security planning and engineering.
Review and assess connectivity, website block, and firewall rule requests to ensure requests do not introduce elevated risk to the agency.
Analyze on-premise and cloud networks for potential threats.
Develop, review, and analyze network traffic reports that violate agency-approved standards governing Ports, Protocols and Services.
Monitor emerging threat vectors and recommend countermeasures.
Collaborate with other areas of the agency to implement security controls.
Support cloud and on-premise network changes and enhancement projects.
Support compliance requirements including ARC-AMPE, HIPAA, and SCDIS-200.
Assist with KPI creation and trend report monitoring.
Participate in firewall configuration reviews and ruleset recertification.
Provide guidance on best practices to technical teams.
Perform additional SOC duties as assigned.

Requirements

Approximately 3-5 years of hands-on experience in network design, implementation, or support.
Hands-on experience in IT security or system administration.
Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models.
Ability to analyze logs, alerts, and network telemetry.
Proficiency with Microsoft Office tools.
BS degree in Computer Science, information systems, Cybersecurity, or related field, or equivalent experience.
A network security centric certification such as PCNSE or CCNA.

Security Program Experience (Strongly Desired)

CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks.
Performing repeatable security processes supporting compliant enterprise architectures.
Supporting security considerations for multi-tenant cloud environments and vendor integrations.

Technical Experience (Hands-On)

Secure network design principles.
Windows, macOS, and Linux operating systems.
Switching and Routing.
Enterprise Firewalls.
Network auditing.
IDS/IPS platforms.
Network security monitoring.
SIEM platforms such as QRadar and Splunk (Preferred).
Vulnerability scanning tools such as Nessus and Qualys.
Cloud Infrastructure Security (Preferred).

Technologies

CMS ARC-AMPE, HIPAA, NIST, FISMA RMF
Windows, macOS, Linux
Switching and Routing; Enterprise Firewalls; IDS/IPS platforms
Network security monitoring; SIEM platforms such as QRadar and Splunk (Preferred)
Vulnerability scanning tools (Nessus, Qualys, etc.)
Cloud Infrastructure Security (Preferred); Azure or AWS
ARC-AMPE, SCDIS-200
PCNSE, CCNA, FISMA
CISSP, Security+

Preferred Skills

Experience working in regulatory environments.
Experience supporting health IT or state government.
Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards.
Cloud network security controls (Azure or AWS).

Education and Certifications

Required: BS degree in Computer Science, information systems, Cybersecurity, or related field, or equivalent experience; network security centric certification such as PCNSE or CCNA.
Preferred: CISSP or Security+.

Benefits

Long-Term Stability: Multi-year opportunities with room to grow.
Comprehensive Health Coverage: Quality healthcare benefits for you and your family.
Future Planning: 401(k) program.
GC Assistance: Support for immediate Green Card processing, if required.

View full job page →

16d ago

Security Analyst (Project Lead)

Concordant, LLC Columbia, SC

Columbia, SC

16d ago

Up to $46/hr Contract Analytics Cyber Security Cybersecurity Operations

Apply Now

Job Description

Concordant, LLC is supporting a statewide cybersecurity program and is hiring a Tier 2 SOC Analyst to serve as a Security Analyst Project Lead. The role focuses on security monitoring, threat detection, incident response, and investigations, with coordination across state agencies. This position is based in Columbia, SC (hybrid), with the expectation to work Eastern Time business hours, and fully remote candidates may be considered with the ability to come on-site when needed.

Key Responsibilities

Review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence to identify complex attack patterns, emerging threats, and security incidents
Conduct deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context
Produce incident reports, timelines, and post-incident summaries, contributing to lessons learned and remediation recommendations
Investigate user-reported phishing, malware infections, and potential policy violations, providing guidance on containment and recovery
Recommend updates to SOC playbooks and workflows, tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve coverage
Partner with engineering teams to configure and tune monitoring tools, integrate new threat intelligence feeds, and hunt for threats using current TTPs
Act as a customer-facing subject matter expert for centralized security services, resolving agency issues as needed
Document SOC processes, runbooks, and troubleshooting steps for operations
Coordinate with engineering, SOC, and agency staff to support program goals

Required Qualifications

2+ years of experience in security monitoring and incident response
2+ years of experience with the MITRE ATT&CK framework
2+ years of experience creating dashboards and reports
2+ years of experience supporting large SOC operations
Associate’s degree in information technology, information security, or a related field (4 years of relevant work experience may substitute for the degree)
Ability to work Eastern Time business hours
Ability to pass background checks including drug, driving record, credit, criminal, E-Verify, and SLED

Technologies

SIEM, EDR, IDS/IPS, threat intelligence, MITRE ATT&CK
Palo Alto Cortex XSIAM/XDR
Linux, Active Directory, VPN, firewalls
TTPs

Benefits

401(k) and 401(k) matching
Dental insurance, Vision insurance, Health insurance, Health savings account
Employee assistance program, Employee discount
Paid time off
Retirement plan

Interview Process

First-round interviews via Microsoft Teams with cameras on
Finalists may complete an in-person interview prior to selection

Role Details

Job Type: Full-time, W2 Contract (12 months, with possible extension)
Location/Work Schedule: Hybrid remote in Columbia, SC 29201; must be able to commute; possibility for remote; must work EST business hours
Pay: $46.00 per hour (up to $46.00 per hour)

About Concordant

Concordant LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA HUBZone-certified firm headquartered in Laramie, Wyoming. The company provides professional IT and cybersecurity services to federal and state government clients.

View full job page →

18d ago

Security Analyst-Project Lead

CAI Columbia, SC

Columbia, SC

18d ago

$64 - $68/hr Full time Analytics Cyber Security Cybersecurity Operations

Apply Now

Job Description

The Security Analyst-Project Lead role supports security incident response operations for a client in a newly created, full-time contract position. This hybrid role is based in Columbia, SC 29228.

Role Overview

In this position, you will monitor and analyze security events, validate and investigate incidents, and lead improvements to SOC workflows. You will also work as a customer-facing subject matter expert, coordinating with SOC and engineering teams to meet operational goals.

Location and Employment Type

Location: Columbia, SC 29228 (hybrid)
Employment: Full-time contract

Compensation

Rate: USD 64 - 68 per hour

Responsibilities

Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence to identify complex attack patterns, emerging threats, and security incidents
Conduct deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required
Produce detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and prevention
Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal and external teams on containment and recovery actions
Recommend updates to SOC playbooks and workflows, including fine-tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned; integrate new threat intelligence feeds into workflows; proactively hunt for threats using up-to-date TTPs
Act as a customer-facing SME by demonstrating capabilities, resolving issues, and communicating the value of services provided
Document SOC processes, runbooks, and troubleshooting steps
Coordinate with engineering, SOC, and agency staff as needed to meet goals
Perform other duties as needed

Required Qualifications

2+ years of experience with security monitoring and incident response
2+ years of experience with the MITRE ATT&CK framework
2+ years of experience with dashboard creation and reporting
Education: Associate’s degree in an information technology or information security related field
Substitution: 4 years of relevant work experience may be substituted in lieu of education
2 years of experience supporting large SOC operations
Candidate is local to Columbia, SC or a surrounding city in South Carolina
Only work authorizations not requiring sponsorship now or in the future will be considered. Local candidates only, please.

Technologies and Tools

SIEM, EDR, IDS/IPS
Threat intelligence
MITRE ATT&CK framework
Palo Alto Cortex XSIAM/XDR
Linux
Active Directory
Firewalls, VPN technology
Intrusion detection and prevention systems

Preferred Qualifications

Experience with the Palo Alto Cortex XSIAM/XDR platform
Knowledge of Linux, network administration, and network design
Experience in administration of firewalls, VPN technology, Active Directory, and intrusion detection and prevention systems

Benefits

Medical, dental, and vision insurance
401k retirement account access
Paid sick leave and/or other paid time off as provided by applicable law

Physical Demands

Ability to safely and successfully perform essential job functions consistent with the ADA and other federal, state and local standards
Sedentary work involving sitting or remaining stationary most of the time, with occasional need to move around the office to attend meetings
Ability to conduct repetitive tasks on a computer using a mouse, keyboard, and monitor

Reasonable Accommodation

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, direct your inquiries to application.accommodations@cai.io or (888) 824-8111.