IT - SCDHHS - Security Analyst - Consultant
Abacus Service Corporation· enterprise· Oct 14, 2026 · 14d ago
Columbia, SC
In office
Full-time
Mid
$100K–$158K est.
3+ years exp
Job description
Position Information
Position Type
Staff Augmentation
Hours/Week
40
Billing Type
Hourly
Shift
Day
Projected Start Date
11/14/2026
Start Time
8:00 AM
Projected End Date/Duration
12 Months from projected start date
End Time
5:00 PM
Bid Limit Per Vendor
2
Number of Positions
1
Desired Career Level
Experienced Non-manager
Minimum Education Level
Bachelor's Degree
Weekend
None
Position Location
Address
1801 Main Street
City
Columbia
State
South Carolina
Zip
29201
Country
UNITED STATES
Requirements
Travel Required
No
Security Required
Yes
Onboarding Category
The following are required for bid submission:
• Resume
• R2R
• Cover Letter
• Meets Work Location
Position Description
Please ensure you attach the SC Cover Sheet (attached), a valid Right to Represent, and the candidate's resume with full legal first name, and last name. Posting attachments should be named as AttachmentName_PostingID_LastName_FirstName. Ex: Resume_1234_Last_First, RTR_1234_Last_First, Coversheet_1234_Last_First
Withdrawn candidates will not be permitted to be replaced. If you would like to use a sub vendor, only 1 level deep, please submit the Sub Vendor usage form.
The State of South Carolina is looking for a Security Analyst - Consultant
Why is this position open: Rebid - there is an incumbent currently working this position.
Will close to submissions on 10/21 at 5:00PM EST.
Interview Process: 1 round, Virtual/Online
Duration of the Contract: 12 months
Possibility for Extension: Yes
Work Location: Fully onsite
Candidate Location: Candidate MUST be a SC resident. No relocation allowed.
Full job description attached & required/preferred skills are stated below.
COMPANY / DEPARTMENT CULTURE (why do you enjoy working for the company – selling points for potential candidates):
The Security Analyst is a hands-on role within the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity (OCS) that will play an integral role in the active defense of the systems and networks at SCDHHS.
The Security Analyst will support the establishment, implementation and/or enhancement of Information Systems' Security and Compliance efforts based on Federal, State and Agency Policy/Standards. The Security Analyst must have foundational technical knowledge of IT systems' security, network security and administrative tasks, be a strong oral and written communicator, and be eager to interact with SCDHHS technical staff, business unit representatives, stakeholders and vendors.
DAILY DUTIES / RESPONSIBILITIES:
The Security Analyst is primarily responsible for assessing and evaluating the organization's information & cyber security solutions and processes, as well as providing technical advisory to influence the design and implementation of security information technology systems and networks. The Security Analyst will guide junior analyst (Security Analyst I and II) to identify and address risks and lead the response to information security issues.
Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.
Technical Knowledge:
Understanding of information technology and security concepts.
Experience or knowledge of operating systems (e.g., Android, iOS, Linux, Windows, MVS, VMWare), cloud computing, networks, hardware and software platforms, and protocols as they relate to information security.
Experience or knowledge in performing vulnerability assessments, including scanning, analysis of results, and manual validation.
Experience with secure networking technologies such as network firewalls and IDS/IPS technologies, Network Security Monitoring expertise, and Security Information and Event Management (SIEM) systems.
Experience in information security incident response and risk management.
Experience managing and responding to information security risks, threats and incidents.
Threat and vulnerability management; awareness of current threats to confidentiality, integrity, and availability of data and controls to mitigate threats
Strong working knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., Centers for Medicaid and Medicare (CMS) ARC-AMPE, National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technology (COBIT), and Federal Risk and Authorization Management Program (FedRAMP).
Experience or knowledge with development and integration of RMF tasks and artifacts into the System Development Life Cycle (SDLC) is ideal.
Experience or knowledge in security as related to multi-tenant, cloud services and vendor interface management would be considered desirable for this position.
Working knowledge of TCP/IP and the functioning of its component protocols, ability to read, and analyze, using various toolsets such as tcpdump, wireshark, etc; how they work and what information they produce will be beneficial in this role.
Understanding basic defense-in-depth principles such as secure system configuration, network segmentation and malicious code protection is a plus.
Information Systems' Security Experience:
Experience working in a SOC environment is preferred.
Experience in operating and contributing to a security operations center responding to alerts and anomalies, creating and interpreting dashboards and triaging cross-functional teams is preferred.
Hands-on experience in the secure implementation, operation and on-going maintenance of computer systems, software, hardware and networks is preferred.
General Duties and Responsibilities:
1. Assist in the day-to-day duties of SOC monitoring activities, tools and processes
2. Provide hands-on support of OCS security tools
3. Conduct threat hunts (specialized searches) for evidence of compromise
4. Monitor security technologies for alerts
5. Investigating incidents, gathering evidence, and analyzing data
6. Analyze anomalous activity and potential threats to Agency connected resources
7. Collaborate with OCS Staff and other agency staff, leadership, business partners and other parties/stakeholders to support security and compliance risk mitigation efforts
8. Other duties as assigned
REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. Must have hands-on experience or educational background in IT System Security or System Administration
2. Experience with incident response procedures and practices
3. Must be willing to learn and take on new tasks
4. Willingness to work independently and as a member of a team
5. Willingness to collaborate and coordinate with multiple teams and vendors
6. Ability to multitask and prioritize tasks effectively in order to effectively report on the status of assigned work
7. Ability to multitask and prioritize tasks effectively in order to meet deadlines in a results-oriented environment
8. Must have intermediate skills in Microsoft Office products (Word, Excel, PowerPoint, Visio) to include working with templates and style guidelines for branding consistency
9. Strong understanding of enterprise operations & secure best practices
10. Ability to absorb, retain and communicate processes
11. Strong written and verbal communication skills.
12. Ability to accept changes and constructive criticism and remain flexible in dealing with leadership and teams of varying technical and business knowledge
PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. Prior Health Information Technology experience
2. Centralized Log Management experience
3. Familiarity with security regulatory requirements and standards (such as NIST 800 series, ARC-AMPE)
4. Experience performing or supporting information security compliance assessments and audits
5. Work and/or consulting experience in federal, state, city or local government
REQUIRED EDUCATION/CERTIFICATIONS:
1. High school diploma with six years of relevant work experience
PREFERRED EDUCATION/CERTIFICATIONS:
1. Bachelor's degree in information technology, computer science, related technical field- with a minimum of 3 years relevant work exp.
2. Information Security certifications such as: CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar
Required Skills
Skill Type
Skill Name
High school diploma with 6+ years of relevant work experience in security analysis
6+ years of experience in IT System Security or System Administration
Experience with incident response procedures and practices
Must have intermediate skills in Microsoft Office products (Word, Excel, PowerPoint, Visio) to include working with templates and style guidelines for branding consistency
Preferred Skills
Skill Type
Skill Name
Bachelor's degree in information technology, computer science, related technical field- with a minimum of 3 years relevant work exp.
Information Security certifications such as: CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar
Prior Health Information Technology experience
Centralized Log Management experience
Familiarity with security regulatory requirements and standards (such as NIST 800 series, ARC-AMPE)
Experience performing or supporting information security compliance assessments and audits
Work and/or consulting experience in federal, state, city or local government
Attachment:
Team Size:
10+
Dress Code: Business Casual, occasionally more formal
Primary Work Location:
1801 Main Street, Columbia, SC 29201
# of Openings
1
Company / Department culture (why do you enjoy working for the company – selling points for potential candidates):
The Security Analyst is a hands-on role within the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity (OCS) that will play an integral role in the active defense of the systems and networks at SCDHHS.
The Security Analyst will support the establishment, implementation and/or enhancement of Information Systems' Security and Compliance efforts based on Federal, State and Agency Policy/Standards. The Security Analyst must have foundational technical knowledge of IT systems' security, network security and administrative tasks, be a strong oral and written communicator, and be eager to interact with SCDHHS technical staff, business unit representatives, stakeholders and vendors.
Why is this position open ( new role, increased workload, new dept, resignation, promotion)?
If backfill Position – What separated the candidate you initially selected from all the other resumes presented?
36 Month Renewal
What types of staffing challenges or headaches have you experienced in the past?
• Recruiters submitting clearly unqualified candidates
• Such as non-technical consultants for HANDS-ON positions
• Commuting candidates not understanding the challenges of an onsite position
• Proven experience in similar efforts and environments is mandatory
• This position requires excellent written and verbal communications skills, particularly the ability to accurately assess, document and report on technical processes and routines
Scope of the project:
The SCDHHS Office of Cybersecurity (OCS) is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. A strong candidate for this position should possess experience or knowledge in the following:
• Cyber Threat Response and Incident Handling
• Cyber Security Operations
• Penetration Testing
• Network Security
Position Title: Security Analyst (Consultant)
Pre-employment Checks (drug, credit, criminal, motor vehicle)?
Criminal/ E-Verify/Credit and DHHS Confidentiality form.
Daily Duties / Responsibilities:
The Security Analyst is primarily responsible for assessing and evaluating the organization's information & cyber security solutions and processes, as well as providing technical advisory to influence the design and implementation of security information technology systems and networks. The Security Analyst will guide junior analyst (Security Analyst I and II) to identify and address risks and lead the response to information security issues.
Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.
Technical Knowledge:
Understanding of information technology and security concepts.
Experience or knowledge of operating systems (e.g., Android, iOS, Linux, Windows, MVS, VMWare), cloud computing, networks, hardware and software platforms, and protocols as they relate to information security.
Experience or knowledge in performing vulnerability assessments, including scanning, analysis of results, and manual validation.
Experience with secure networking technologies such as network firewalls and IDS/IPS technologies, Network Security Monitoring expertise, and Security Information and Event Management (SIEM) systems.
Experience in information security incident response and risk management.
Experience managing and responding to information security risks, threats and incidents.
Threat and vulnerability management; awareness of current threats to confidentiality, integrity, and availability of data and controls to mitigate threats
Strong working knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., Centers for Medicaid and Medicare (CMS) ARC-AMPE, National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technology (COBIT), and Federal Risk and Authorization Management Program (FedRAMP).
Experience or knowledge with development and integration of RMF tasks and artifacts into the System Development Life Cycle (SDLC) is ideal.
Experience or knowledge in security as related to multi-tenant, cloud services and vendor interface management would be considered desirable for this position.
Working knowledge of TCP/IP and the functioning of its component protocols, ability to read, and analyze, using various toolsets such as tcpdump, wireshark, etc; how they work and what information they produce will be beneficial in this role.
Understanding basic defense-in-depth principles such as secure system configuration, network segmentation and malicious code protection is a plus.
Information Systems' Security Experience:
Experience working in a SOC environment is preferred.
Experience in operating and contributing to a security operations center responding to alerts and anomalies, creating and interpreting dashboards and triaging cross-functional teams is preferred.
Hands-on experience in the secure implementation, operation and on-going maintenance of computer systems, software, hardware and networks is preferred.
General Duties and Responsibilities:
• Assist in the day-to-day duties of SOC monitoring activities, tools and processes
• Provide hands-on support of OCS security tools
• Conduct threat hunts (specialized searches) for evidence of compromise
• Monitor security technologies for alerts
• Investigating incidents, gathering evidence, and analyzing data
• Analyze anomalous activity and potential threats to Agency connected resources
• Collaborate with OCS Staff and other agency staff, leadership, business partners and other parties/stakeholders to support security and compliance risk mitigation efforts
• Other duties as assigned
Required Skills (rank in order of Importance):
• 6+ years of experience in IT System Security or System Administration
• Experience with incident response procedures and practices
• Must have intermediate skills in Microsoft Office products (Word, Excel, PowerPoint, Visio) to include working with templates and style guidelines for branding consistency
Preferred Skills (rank in order of Importance):
• Prior Health Information Technology experience
• Centralized Log Management experience
• Familiarity with security regulatory requirements and standards (such as NIST 800 series, ARC-AMPE)
• Experience performing or supporting information security compliance assessments and audits
• Work and/or consulting experience in federal, state, city or local government
Required Education/Certifications:
• High school diploma with six years of relevant work experience
Preferred Education/Certifications:
• Bachelor's degree in information technology, computer science, related technical field- with a minimum of 3 years relevant work exp.
• Information Security certifications such as: CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar
Interview Process (phone, video or in-person, how many rounds of interviews, etc.)?
Virtual/Online
additional skills::
• Must be willing to learn and take on new tasks
• Willingness to work independently and as a member of a team
• Willingness to collaborate and coordinate with multiple teams and vendors
• Ability to multitask and prioritize tasks effectively in order to effectively report on the status of assigned work
• Ability to multitask and prioritize tasks effectively in order to meet deadlines in a results-oriented environment
• Strong understanding of enterprise operations & secure best practices
• Strong written and verbal communication skills.
• Ability to accept changes and constructive criticism and remain flexible in dealing with leadership and teams of varying technical and business knowledge
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - Abacus .
Application prep
Use the role’s language and application details while tailoring your materials.
Keywords to mirror
ai
- Platform
- jobdiva
- Effort
- medium