Job description

Job Title : Security Analyst – Incident Response & SOC Operations Position Overview Support statewide security incident response through hands-on security monitoring, threat investigation, incident analysis, and Security Operations Center (SOC) improvement. This role offers the opportunity to investigate complex security events, strengthen detection and response workflows, collaborate with engineering teams, and serve as a subject matter expert supporting security operations. What You'll Do / Key Responsibilities • Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. • Perform in-depth analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context as required. • Create incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and remediation and prevention recommendations. • Investigate user-reported phishing, malware infections, and potential policy violations, advising users and internal and external teams on containment and recovery actions. • Recommend improvements to SOC playbooks and workflows based on investigation findings; fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage. • Collaborate with engineering teams to configure and tune monitoring tools, integrate threat intelligence feeds, and proactively hunt for threats using current tactics, techniques, and procedures (TTPs). • Serve as a customer-facing subject matter expert, demonstrate security service capabilities, communicate their value, and help resolve issues. • Document SOC processes, runbooks, and troubleshooting steps. • Coordinate with engineering teams, SOC personnel, and agency staff to meet operational goals. • Perform other duties as needed. Required Qualifications • Associate’s degree in an information technology or information security-related field, or 4+ years of relevant work experience may be substituted in lieu of education. • 2+ years of experience with security monitoring and incident response. • 2+ years of experience with the MITRE ATT&CK framework. • 2+ years of experience with dashboard creation and reporting. • 2+ years of experience supporting large SOC operations. • Ability to work Eastern Time Zone hours. Preferred Qualifications • Experience with the Palo Alto Cortex XSIAM/XDR platform. • Knowledge of Linux, network administration, and network design. • Experience administering firewalls, VPN technology, Active Directory, and Intrusion Detection/Prevention systems. • CISSP, CISA, CISO, or equivalent advanced security certification. • Additional relevant certifications, such as CEH, OSCP, or GPEN. • Vendor certifications related to information security. • Located in Columbia, SC, or a surrounding South Carolina city, with availability to work onsite as needed. What Makes HTC A Great Place To Build Your Future HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you’ll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You’ll have long-term opportunities to grow your career and develop skills in the latest emerging technologies. At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks. Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected. #SecurityAnalyst #SOCAnalyst #SecurityOperations #IncidentResponse #CyberSecurity #MITREATTACK #SecurityMonitoring #SOCOperations #ThreatHunting #SIEM #EDR #PaloAltoCortex #XSIAM

Requirements

Must-haves

Job Title : Security Analyst – Incident Response & SOC Operations
Position Overview
What You'll Do / Key Responsibilities
Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.
Perform in-depth analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context as required.
Create incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and remediation and prevention recommendations.
Investigate user-reported phishing, malware infections, and potential policy violations, advising users and internal and external teams on containment and recovery actions.
Recommend improvements to SOC playbooks and workflows based on investigation findings; fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage.
Collaborate with engineering teams to configure and tune monitoring tools, integrate threat intelligence feeds, and proactively hunt for threats using current tactics, techniques, and procedures (TTPs).
Serve as a customer-facing subject matter expert, demonstrate security service capabilities, communicate their value, and help resolve issues.
Document SOC processes, runbooks, and troubleshooting steps.
Coordinate with engineering teams, SOC personnel, and agency staff to meet operational goals.
Perform other duties as needed.
Associate’s degree in an information technology or information security-related field, or 4+ years of relevant work experience may be substituted in lieu of education.
2+ years of experience with security monitoring and incident response.

Nice-to-haves

Experience with the Palo Alto Cortex XSIAM/XDR platform.
Knowledge of Linux, network administration, and network design.
Experience administering firewalls, VPN technology, Active Directory, and Intrusion Detection/Prevention systems.
CISSP, CISA, CISO, or equivalent advanced security certification.
Additional relevant certifications, such as CEH, OSCP, or GPEN.
Vendor certifications related to information security.
Located in Columbia, SC, or a surrounding South Carolina city, with availability to work onsite as needed.
What Makes HTC A Great Place To Build Your Future
#SecurityAnalyst #SOCAnalyst #SecurityOperations #IncidentResponse #CyberSecurity #MITREATTACK #SecurityMonitoring #SOCOperations #ThreatHunting #SIEM #EDR #PaloAltoCortex #XSIAM

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: htc-global
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Wellness

Professional Development