Senior Analyst, Cyber Security - Request

Position: Senior Analyst, Cyber Security - Request #37342439
Location: Columbia

Description:

Why should you join the Blue Cross Blue Shield of South Carolina family of companies? Other companies come and go, but for more than seven decades we've been part of the national landscape, with our roots firmly embedded in the South Carolina community. Business and political climates may change, but we're stronger than ever. Our A.M. Best rating is A+ (Superior) - making us the only health insurance company in South Carolina with that rating.

We're the largest insurance company in South Carolina ...and much more. We are one of the nation's leading administrators of government contracts. We operate one of the most sophisticated data processing centers in the Southeast. We also have a diverse family of subsidiary companies that allows us to build on a variety of business strengths. We deliver outstanding service to our customers.

If you are dedicated to the same philosophy, consider joining our team!

Job Title:

Sr Analyst, Cyber Security

Position Details:

• Contract
• C2 Eligibility is Required
• Partial Onsite:
  Tuesday, Wednesday, Thursday Onsite and as Needed
• Hours:
  
  8-5 - OT, Travel, On Call, Weekends, Off Hours - As needed but not usually.
• Interviews:
  Prefer Local In person, (Remote if needed)

Responsibilities:

• Performs daily monitoring and review of security events that are escalated by junior analysts. Keeps up with the cyber threat landscape in order to rapidly identify potential threats. Performs security assessments such as penetration testing, vulnerability scanning and advanced threat hunting.
• 40% Plans and performs security assessments such as penetration testing, vulnerability scanning and advanced threat hunting. Anticipates and mitigates potential attacks through enterprise connections to ensure the security of the system (s). Exploits weaknesses detected in systems to assess and prevent potential break-ins. Analyzes business impact and exposure based on security threats, vulnerabilities, and risks. Keeps up with the cyber threat landscape in order to rapidly identify potential threats.
  
  Ensures security tools are properly tuned to identify and contain cyber-attacks before they happen.
• 20% Develops and implements enterprise information security architectures and solutions. Researches, designs, and advocates new technologies, infrastructure, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Identifies, plans and implements security tools.
• 20% Performs daily monitoring and review of security events that are escalated by junior analysts. Provides security technical guidance to junior analysts. Performs investigations as needed and responses to potential incidents rapidly and accurately.
• 10% Researches new security/cyber intelligence and keeps up with the cyber threat landscape in order to rapidly identify potential threats. Ensures security tools are properly tuned to identify and contain cyber-attacks before they happen.
• 5% Evaluates and recommends procedures and processes for the prevention, detection, containment and correction of information security breaches. Advises management and users regarding security procedures.
• 5% Monitors security agencies and services in order to keep apprised of current security threats and concerns. Evaluates products and/or procedures to enhance productivity and effectiveness of information security across the organization.

Primary Focus:
Security Assessments and Penetration Testing

Leads and executes security assessments with a primary focus on penetration testing, vulnerability analysis, and risk evaluation across enterprise systems.

Security Assessments and Penetration Testing
Plans and conducts penetration testing and vulnerability assessments to identify and exploit weaknesses across systems, applications, and networks. Simulates real-world attack scenarios to evaluate risk, business impact, and exposure. Anticipates potential attack vectors and recommends mitigation strategies. Maintains awareness of emerging threats to ensure testing reflects current attacker techniques.

Security Tooling and Assessment Enablement
Researches and supports implementation of tools that enhance assessment capabilities, including penetration testing and vulnerability scanning platforms. Ensures tools are properly configured and aligned with enterprise security requirements.

Advisory and Continuous Improvement
Provides recommendations to improve testing methodologies and coverage. Advises stakeholders on remediation strategies based on assessment results and evolving threats, continuously enhancing the effectiveness of security testing practices.

Required: Linux and various penetration testing tools. (Burp Suite, Meta Sploit, Nessus)

Soft Skills:
• Strong verbal and written communication skills, with the ability to clearly explain security findings to both technical teams and non-technical stakeholders.
• Ability to translate complex vulnerabilities into business-relevant risk and provide practical,…