Security Analyst-Project Lead
Req number:
R8821
Employment type:
Full time
Worksite flexibility:
Onsite Who we are CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion . We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.
Job Summary
As a Security Analyst-Project Lead, you will support security incident response operations for our client. This is a newly created position.
Job Description
We are looking for a Security Analyst-Project Lead to support security incident response operations. This position will be full-time contract and hybrid in Columbia, SC.
Only work authorizations not requiring sponsorship now or in the future will be considered. Local candidates only, please.
What You’ll Do
Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents
Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required
Create detailed incident reports, timelines, and post-incident summaries and contribute to lessons-learned documentation and recommendations for remediation and preventative measures
Investigate user-reported phishing, malware infections, and potential policy violations and advise users and internal and external teams on containment and recovery actions
Recommend updates to SOC playbooks and workflows based on real-world investigations, fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned, integrate new threat intelligence feeds into workflows, and proactively hunt for threats using up-to-date tactics, techniques, and procedures (TTPs)
Serve as a customer-facing SME, demonstrating capabilities and resolving issues while communicating the value of services provided
Document processes, runbooks, and troubleshooting steps related to SOC operations
Coordinate with engineering, SOC, and agency staff as needed to meet goals
Perform other duties as needed
What You’ll Need
Required:
2 years of experience with security monitoring and incident response
2 years of experience with MITRE ATT&CK framework
2 years of experience with dashboard creation and reporting
Associate’s degree in an information technology or information security related field
4 years of relevant work experience may be substituted in lieu of education
2 years of experience supporting large SOC operations
Candidate is local to Columbia, SC or a surrounding city in South Carolina
Preferred:
Experience with the Palo Alto Cortex XSIAM/XDR platform
Knowledge of Linux, network administration, and network design
Experience in administration of firewalls, VPN technology, Active Directory, and intrusion detection and prevention systems
Physical Demands
Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards
Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor
#LI-NA1
Reasonable accommodation statement
If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations cai.io or (888) 824 – 8111.
EEO Statement
It is the policy of Computer Aid, Inc.(CAI) not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. It is also the policy of CAI to take affirmative action to employ and to advance in employment, all persons regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.
Employees and applicants of CAI will not be subject to harassment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. Additionally, retaliation, including intimidation, threats, or coercion, because an employee or applicant has objected to discrimination, engaged or may engage in filing a complaint, assisted in a review, investigation, or hearing or have otherwise sought to obtain their legal rights under any Federal, State, or local EEO law is prohibited.
$64-$68 per hour The pay range for this position is listed above. Exact compensation may vary based on several factors, including location, experience, and education. Benefit packages include medical, dental, and vision insurance, as well as 401k retirement account access. Employees in this role may also be entitled to paid sick leave and/or other paid time off as provided by applicable law.