Security Analyst (Incident Response & SOC Operations)

Location: Remote from the United States; based in or near Columbia, South Carolina preferred, with availability to work onsite as needed. Eastern Time Zone hours required.

Company

Technology services organization providing security operations support, engineering collaboration, client-facing services, and professional development opportunities.

What you will do

• Correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify attack patterns, emerging threats, and incidents.
• Analyze suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context.
• Prepare incident reports, timelines, post-incident summaries, lessons learned, and remediation and prevention recommendations.
• Investigate phishing, malware infections, and potential policy violations while advising users and internal and external teams on containment and recovery.
• Improve SOC playbooks, workflows, detection rules, alert thresholds, and correlation logic; configure monitoring tools, integrate threat intelligence feeds, and conduct threat hunting.
• Act as a customer-facing subject matter expert, document SOC processes and runbooks, and coordinate with engineering teams, SOC personnel, and agency staff.

Requirements

• Associate’s degree in information technology or information security, or 4+ years of relevant work experience in lieu of education.
• 2+ years of experience with security monitoring and incident response.
• 2+ years of experience with the MITRE ATT&CK framework.
• 2+ years of experience with dashboard creation and reporting.
• 2+ years of experience supporting large SOC operations.
• Ability to work Eastern Time Zone hours.

Nice to have

• Experience with Palo Alto Cortex XSIAM/XDR.
• Knowledge of Linux, network administration, and network design.
• Experience administering firewalls, VPN technology, Active Directory, and intrusion detection/prevention systems.
• CISSP, CISA, CISO, or equivalent advanced security certification.
• Additional certifications such as CEH, OSCP, GPEN, or vendor information security certifications.
• Location in Columbia, South Carolina, or a surrounding South Carolina city, with availability to work onsite as needed.

Culture & Benefits

• Collaboration with security, engineering, and client teams.
• Long-term career growth and opportunities to develop skills in emerging technologies.
• Potential medical, dental, and vision coverage, paid time off, paid holidays, 401(k) matching, life and disability insurance, professional development, and wellness programs.
• Inclusive workplace committed to diversity and equal opportunity.