IT - SCDMV - Security Analyst - Entry

TALENT Software Services; Blythewood (SC); In loco; USD 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

TALENT Software Services is seeking a Security Analyst to join the DMV security team in Blythewood, SC. The role focuses on threat intelligence, hunting, log analysis, incident response, and security automation.

Training will be provided for entry-level candidates with basic server or network administration skills. The position requires availability for onsite interviews and a schedule that includes Saturday-Sunday night coverage and weekday dayshifts.

Competenze

• Understanding of security concepts and processes.
• Understanding of basic computer and network concepts.
• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related field is preferred.
• Experience with SIEM and Endpoint Security Tools is preferred.
• Knowledge of Vulnerability Management and Cloud Security is preferred.

Mansioni

• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
• Document findings and share with the team; use OSINT tools to gather data on risks and adversaries.
• Conduct proactive threat hunting and create detection rules (e.g., SIEM queries, Defender rules).
• Review logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Assist in incident triage following NIST/MITRE standards; document findings and support containment and remediation.
• Create detailed incident reports, after-action reviews, and process documentation.
• Develop and deliver security awareness training materials and simulations.
• Automate tasks with PowerShell, SCCM, and GPO; manage endpoint protection and cloud security knowledge.

Conoscenze

Security concepts

Computers & networks basics

SIEM experience

PowerShell

Group Policy

Endpoint management

Formazione

Bachelor’s degree in IT/CS/Cybersecurity or related field

High School Diploma minimum

Descrizione del lavoro

Job Duration: 12 Months

Job Location: Blythewood, SC 29016, (Onsite)

Interview Type: 1-2 Rounds of Virtual or Onsite Interviews. Candidates are expected to be available for onsite interviews.

Shift/Schedule: Working Schedule: Saturday and Sunday evening coverage likely to be 8:00PM-8:00AM (2 12-Hour Shifts) with dayshifts Wednesday and Thursday (8:30 AM - 2:45 PM).

• Enhance the security posture of the Department of Motor Vehicles to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems

Job Title: Security Analyst

Job Duration: 12 Months

Job Location: Blythewood, SC 29016, (Onsite)

Interview Type: 1-2 Rounds of Virtual or Onsite Interviews. Candidates are expected to be available for onsite interviews.

Shift/Schedule: Working Schedule: Saturday and Sunday evening coverage likely to be 8:00PM-8:00AM (2 12-Hour Shifts) with dayshifts Wednesday and Thursday (8:30 AM - 2:45 PM).

Job Summary:

• Enhance the security posture of the Department of Motor Vehicles to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems

Job Description:

The DMV Security Team is looking for candidates to fill an entry level security position. The DMV will train the selected candidate to perform the tasks listed below. At a minimum We are looking for basic server or network administration skills that we can build upon.

Threat Intelligence Research

• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
• Document findings, such as new attack methods or vulnerabilities, and share with the team.
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.

Threat Hunting and Detection Rule Creation

• Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
• Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
• Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules).
• Document hunting methodologies and findings to support continuous improvement.

Log Analysis

• Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts.
• Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.

Incident Response

• Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE Telecommunication&CK).
• Identify and escalation potential security threats.
• Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents.
• Document findings during incidents and contribute to containment and remediation efforts.

Documentation, Reporting, and Communication

• Create clear, detailed reports, including incident reports, after-action reviews, and process documentation.
• Deliver reports on the security posture and propose mitigation strategies.
• Draft training materials or guides to help improve organizational awareness and readiness.
• Regularly update and organize documentation to ensure accuracy and accessibility for team use.

Vulnerability Management

• Analyze reports, prioritize patching, and understand NIST best practices.

Security Awareness Training

• Develop and deliver training and assess employee awareness through simulations.

Security Automation and Scripting

• Leverage SCCM, GPO, and PowerShell for patch deployment.
• Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency.

Endpoint and Network Security

• Configure policies, analyze alerts, and manage endpoint protection.
• Understand network protocols and firewalls to strengthen the overall security posture.
• Digital Forensics and Cloud Security
• Investigate security incidents and collect evidence for deeper analysis.
• Develop knowledge of cloud-specific security solutions as cloud adoption grows

Required Skills:

• Understanding of security concepts and processes
• Understanding of basic computer and network concepts
• A High School Diploma is required at minimum

Preferred Qualifications:

• 1+ Year of Experience in an IT Security Focused Role
• Experience with SIEM and Endpoint Security Tools
• Experience with PowerShell, Group Policy, and Endpoint Management
• Knowledge of Vulnerability Management and Cloud Security
• Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field
• 1+ Years of Experience in Server or Network Administration
• GIAC Security Essentials (GSEC)
• Security+ (CompTIA)
• Network+ (CompTIA)
• GIAC Incident Handler (GCIH)