Security Analyst

Computer Consultants International, Inc. (CCI) is hiring a Tier 2 Security Operations Center Analyst to support the State of South Carolina’s Division of Information Security. The role focuses on security monitoring, threat detection, incident response, investigations, and improving centralized security operations in a remote position.

Responsibilities:

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify threats and potential security incidents
• Investigate suspicious activity, validate alerts, determine root cause and impact, and escalate critical incidents to Tier 3 teams as appropriate
• Prepare detailed incident reports, investigation timelines, post-incident summaries, and remediation recommendations
• Investigate phishing reports, malware infections, and potential security policy violations; support containment and recovery activities
• Improve SOC playbooks, workflows, detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
• Collaborate with engineering teams to configure and tune security monitoring tools and integrate threat intelligence feeds
• Apply knowledge of current attacker tactics, techniques, and procedures (TTPs) to support proactive threat hunting
• Document SOC processes, runbooks, troubleshooting procedures, and operational recommendations
• Work with state agency personnel and technical teams to resolve issues and improve the adoption and effectiveness of DIS security services
• Communicate security findings and demonstrate the value of centralized security services to stakeholders
• Perform other related duties as required

Requirements:

• Associate degree in Information Technology, Information Security, or a related field; alternatively, at least four years of relevant professional experience may substitute for the degree
• At least two years of experience with the MITRE ATT&CK framework
• At least two years of experience creating dashboards and security reports
• At least two years of experience in security monitoring and incident response
• At least two years of experience supporting large-scale Security Operations Center (SOC) operations
• CISSP, CISA, CISO-related credentials, or an equivalent advanced security certification
• Additional security certifications such as CEH, OSCP, or GPEN
• Vendor-specific information security certifications
• Experience administering firewalls, VPN technologies, Active Directory, and intrusion detection/prevention systems
• Experience with Palo Alto Cortex XSIAM/XDR
• Knowledge of Linux, network administration, and network design