Security Analyst – Cybersecurity & Security Operations COlumbia, SC

Full time | SUNSHINE ENTERPRISE USA LLC | United States

Posted On 10/18/2026

IT Services

Work Experience 4-5 years

City Columbia

State/Province South Carolina

29212

Security Analyst – Cybersecurity & Security Operations

Location:

Columbia, SC Onsite

Interview Process: 1 round, Virtual/Online
Duration: 12 Months

Employment Type:

Contract
Experience

Required:

07+ Years

Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed.

Project Scope:

We are seeking an experienced Security Analyst to support active defense and cybersecurity operations across enterprise systems and networks. This hands-on role will contribute to the establishment, implementation, and enhancement of information security and compliance initiatives in accordance with federal, state, and organizational policies and standards.

The ideal candidate will have a strong foundation in IT systems security, network security, system administration, vulnerability management, and incident response. The candidate must possess excellent analytical, communication, and problem-solving skills and be comfortable collaborating with technical teams, business stakeholders, leadership, and external vendors.

The Security Analyst will assess security solutions and processes, provide technical guidance on security system design and implementation, support security operations center (SOC) activities, and help junior analysts identify and address security risks.

Key Responsibilities:

Security Operations and Monitoring

• Assist with day-to-day security operations center (SOC) monitoring activities, tools, and processes.
• Provide hands-on support for security tools and technologies.
• Monitor security systems and technologies for alerts, anomalies, and potential threats.
• Conduct threat hunting activities to identify evidence of compromise across systems and networks.
• Investigate security incidents, gather relevant evidence, and analyze security-related data.
• Analyze anomalous activity and assess potential threats to connected systems and organizational resources.
• Support incident response activities and coordinate with relevant teams to contain and address security issues.

Security Risk and Vulnerability Management

• Assess and evaluate information security solutions, processes, systems, and networks.
• Perform vulnerability assessments, including scanning, analysis of findings, and manual validation.
• Identify security risks and recommend appropriate mitigation strategies.
• Support threat and vulnerability management activities to protect the confidentiality, integrity, and availability of organizational data.
• Apply defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
• Provide technical recommendations to influence the secure design, implementation, operation, and maintenance of information technology systems.
• Guide junior security analysts in identifying risks and responding to information security issues.

Security Compliance and Risk Assessment

• Support information security and compliance initiatives aligned with applicable federal, state, and organizational policies and standards.
• Apply relevant security frameworks and regulatory requirements, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP, as applicable.
• Assist with security compliance assessments, audits, and risk mitigation activities.
• Support the integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
• Contribute to the secure management of cloud services, multi-tenant environments, and vendor interfaces.

Network and Systems Security

• Apply knowledge of operating systems and technology platforms, including Windows, Linux, Android, iOS, MVS, and VMware environments.
• Support security monitoring and analysis across networks, hardware, software platforms, and cloud infrastructure.
• Analyze TCP/IP traffic and network protocols using tools such as Wireshark and tcpdump.
• Apply knowledge of firewalls, intrusion detection and prevention systems (IDS/IPS), network security monitoring, and Security Information and Event Management (SIEM) solutions.
• Support the secure implementation, operation, and ongoing maintenance of systems, software, hardware, and networks.

Collaboration and Reporting

• Collaborate with cybersecurity staff, technical teams, business units, leadership, stakeholders, and vendors to support security and compliance…