Cybersecurity Analyst

Remote Jobs; Columbia (SC); Remote; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Disability coverage

Life insurance

401(k) with match

Remote work

Job summary

SYSTEMTEC is seeking a Cybersecurity Analyst for a remote role with EST hours. You will monitor threats, investigate incidents, and strengthen detection and response capabilities within a large-scale SOC, collaborating with technical teams and participating agencies.

The role emphasizes threat analysis, incident response, and security Operations Center excellence, with opportunities to enhance centralized services and security practices across the organization.

Qualifications

• Authorized to work in the U.S. without sponsorship.
• Associate degree in Information Technology, Information Security, or a related field, or 4+ years of relevant experience.
• At least two years of experience with the MITRE ATT&CK framework for threat analysis, detection, or investigations.
• Minimum of two years creating security dashboards, analyzing metrics, and producing reports.
• Two or more years in security monitoring, threat detection, and incident response.
• At least two years supporting large-scale Security Operations Center (SOC) operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intel sources.
• Strong analytical, troubleshooting, documentation, and communication skills.

Responsibilities

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intel platforms to identify attack patterns and emerging threats.
• Investigate suspected incidents, determine scope and root cause, assess impact, and elevate high-priority findings to Tier 3 analysts when needed.
• Respond to phishing reports, malware infections, and policy violations with containment and remediation activities.
• Produce incident reports, timelines, and post-incident summaries; recommend preventive measures and improvements to controls.
• Enhance SOC detection and response by refining alert thresholds, rules, workflows, and playbooks; collaborate with engineering teams.
• Partner with agency representatives, security engineers, and SOC staff to resolve issues and promote centralized security services.

Skills

MITRE ATT&CK

Security dashboards

SOC operations

Incident response

SIEM/EDR/IDS

Education

Associate degree in Information Technology, Information Security, or a related field

Tools

Palo Alto Cortex XSIAM

Job description

SYSTEMTEC is seeking a Cybersecurity Analyst for a remote opportunity for candidates working EST hours. Candidate will support enterprise security operations by monitoring threats, investigating security incidents, and strengthening detection and response capabilities within a large-scale Security Operations Center (SOC). This role will also collaborate with technical teams and participating agencies to improve security practices and expand the use of centralized security services.

Required Qualifications of the Cybersecurity Analyst:

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Associate degree in Information Technology, Information Security, or a related field; alternatively, four or more years of relevant professional experience may substitute for the degree.
• At least two years of experience working with the MITRE ATT&CK framework for threat analysis, detection, or investigations.
• Minimum of two years of experience creating security dashboards, analyzing metrics, and preparing reports.
• Two or more years of experience in security monitoring, threat detection, and incident response.
• At least two years of experience supporting large-scale Security Operations Center (SOC) operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intelligence sources.
• Ability to investigate security incidents, determine root causes and impacts, document findings, and elevate critical threats appropriately.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to collaborate across technical teams and organizational stakeholders.

Preferred Skills/Experience of the Cybersecurity Analyst:

• Advanced security certifications such as CISSP, CISA, CISO-related credentials, or equivalent qualifications.
• Additional certifications such as CEH, OSCP, GPEN, or relevant vendor-specific security credentials.
• Experience with Palo Alto Cortex XSIAM and/or XDR.
• Knowledge of firewall administration, VPN technologies, Active Directory, and intrusion detection/prevention systems.
• Familiarity with Linux, network administration, and network architecture.
• Experience with threat hunting, security playbooks, detection rule tuning, and reducing false-positive alerts.
• Preference for candidates based in Columbia, South Carolina, or surrounding areas who can accommodate onsite project needs.

Responsibilities of the Cybersecurity Analyst:

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify attack patterns, suspicious activity, and emerging threats.
• Investigate suspected security incidents, determine scope and root cause, assess potential impact, and elevate high-priority findings to Tier 3 analysts when appropriate.
• Respond to phishing reports, malware infections, and suspected policy violations by coordinating containment, remediation, and recovery activities.
• Produce incident reports, investigation timelines, and post-incident summaries; recommend preventive measures and improvements to security controls.
• Enhance SOC detection and response capabilities by refining alert thresholds, correlation rules, investigation workflows, and response playbooks; collaborate with engineering teams on monitoring tools and threat intelligence integration.
• Partner with agency representatives, security engineers, and SOC personnel to resolve issues, document operational procedures, promote centralized security services, and improve security operations.

Work Location:

Remote. EST Hours.

Compensation / Benefits:

Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey***