Security Analyst

HTC Global Services; Columbia (SC); On-site; USD 85,000 - 125,000; Full time

Job summary

HTC Global Services in Columbia, SC seeks a Security Analyst focused on Incident Response and SOC Operations. You will monitor security events, investigate incidents, and improve detection and response workflows while collaborating with engineering teams and clients to strengthen security postures.

Responsibilities include incident analysis, reporting, post-incident reviews, and advisory on containment for threats. This role requires ET hours and onsite availability as needed.

Qualifications

• Associate's degree in IT or security or 4+ years of relevant work experience.
• 2+ years in security monitoring and incident response.
• 2+ years with MITRE ATT&CK framework and related analytics.
• 2+ years of dashboard creation and SOC reporting.
• Experience supporting large SOC operations.

Responsibilities

• Continuously review security data across SIEM/EDR/IDS to identify threats.
• Analyze incidents, determine root cause, and escalate Tier 3 when needed.
• Create incident reports, timelines, and post-incident summaries.
• Respond to phishing, malware, and policy violation events with containment guidance.
• Improve SOC playbooks, tune detection rules and reduce false positives.
• Collaborate to configure tools, integrate threat feeds, and hunt for threats.
• Serve as customer-facing SME and communicate SOC capabilities.
• Document SOC processes, runbooks, and troubleshooting steps.
• Coordinate with engineering, SOC staff, and agencies to meet goals.

Skills

Security monitoring

Incident response

MITRE ATT&CK

Dashboard reporting

SOC operations

Education

Associate degree or equivalent

Tools

Palo Alto Cortex XSIAM

Linux

Active Directory

Firewall administration

VPN technology

IDS/IPS

SIEM

EDR

CISSP/CISA

Job description

Job Description

Job Title: Security Analyst - Incident Response & SOC Operations

Position Overview

Support statewide security incident response through hands-on security monitoring, threat investigation, incident analysis, and Security Operations Center (SOC) improvement. This role offers the opportunity to investigate complex security events, strengthen detection and response workflows, collaborate with engineering teams, and serve as a subject matter expert supporting security operations.

What You'll Do / Key Responsibilities

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.
• Perform in-depth analysis of suspicious activity, validate incidents, determine root cause and impact, and upscale critical incidents to Tier 3 with detailed context as required.
• Create incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and remediation and prevention recommendations.
• Investigate user-reported phishing, malware infections, and potential policy violations, advising users and internal and external teams on containment and recovery actions.
• Recommend improvements to SOC playbooks and workflows based on investigation findings; fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage.
• Collaborate with engineering teams to configure and tune monitoring tools, integrate threat intelligence feeds, and proactively hunt for threats using current tactics, techniques, and procedures (TTPs).
• Serve as a customer-facing subject-matter expert, demonstrate security service capabilities, communicate their value, and help resolve issues.
• Document SOC processes, runbooks, and troubleshooting steps.
• Coordinate with engineering teams, SOC personnel, and agency staff to meet operational goals.
• Perform other duties as needed.

Required Qualifications

• Associate's degree in an information technology or information security-related field, or 4+ years of relevant work experience may be substituted in lieu of education.
• 2+ years of experience with security monitoring and incident response.
• 2+ years of experience with the MITRE ATT&CK framework.
• 2+ years of experience with dashboard creation and reporting.
• 2+ years of experience supporting large SOC operations.
• Ability to work Eastern Time Zone hours.

Preferred Qualifications

• Experience with the Palo Alto Cortex XSIAM/XDR platform.
• Knowledge of Linux, network administration, and network design.
• Experience administering firewalls, VPN technology, Active Directory, and Intrusion Detection/Prevention systems.
• CISSP, CISA, CISO, or equivalent advanced security certification.
• Additional relevant certifications, such as CEH, OSCP, or GPEN.
• Vendor certifications related to information security.
• Located in Columbia, SC, or a surrounding South Carolina city, with availability to work onsite as needed.

What Makes HTC A Great Place To Build Your Future

HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you'll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You'll have long-term opportunities to grow your career and develop skills in the latest emerging technologies.

At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks.

Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected.

#SecurityAnalyst #SOCAnalyst #SecurityOperations #IncidentResponse #CyberSecurity #MITREATTACK #SecurityMonitoring #SOCOperations #ThreatHunting #SIEM #EDR #PaloAltoCortex #XSIAM