Security Analyst

Innosoft Corporation; New York (NY); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health Insurance

Paid Vacation

401K Match

STD/LTD & AD&D

Job summary

Innosoft Corporation is seeking a Security Analyst to support the South Carolina Department of Health and Human Services Office of Cybersecurity. The role focuses on protecting agency systems and networks, with hands-on work in threat monitoring, incident response, and compliance activities across Windows, Linux, cloud, and on-prem environments.

The ideal candidate will have foundational IT security knowledge, experience with SOC operations, and the ability to collaborate across technical teams

Qualifications

• 6+ years of experience in IT System Security or System Administration.
• Experience with cybersecurity incident response procedures and practices.
• Intermediate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio, with experience using templates and styleguides to maintain branding consistency.

Responsibilities

• Assess and evaluate the organization's information security solutions, processes, systems, and networks to identify risks and recommend improvements.
• Provide technical guidance on the design, implementation, and maintenance of secure IT systems and networks.
• Guide and mentor junior Security Analysts (Level I and II) in identifying security risks, investigating threats, and responding to security incidents.
• Support daily Security Operations Center (SOC) activities, including security monitoring, alert analysis, threat detection, and incident response.
• Conduct proactive threat hunting to identify suspicious activities, potential vulnerabilities, and evidence of compromise.

Skills

IT Security

Incident Response

Microsoft Office

Analytical Skills

Communication

Education

Bachelor's degree in IT/CS

Tools

Wireshark

tcpdump

Job description

Columbia, United States | Posted on 10/14/2026

Location:1801 Main Street, Columbia, South Carolina, USA, 29201.

Candidatelocation: Candidate must be a CURRENT SC resident. No relocationallowed.

Contract Duration

12 Months

Interview Type

Online

The candidate will have to be on an InnosoftW2.

At least 6 months of valid workauthorization

Tentative Start Date

11/14/2026

Deadline

10/20/2026

Project Overview

The Security Analyst will play a key role insupporting the South Carolina Department of Health and Human Services (SCDHHS)Office of Cybersecurity (OCS) by actively protecting the agency’s systems andnetworks. This hands-on position involves supporting and enhancing informationsecurity and compliance initiatives in accordance with federal, state, andagency policies and standards. The ideal candidate should possess foundationaltechnical knowledge of IT systems security, network security, cybersecurity operations,cyber threat response, incident handling, and penetration testing.Responsibilities include supporting continuous cybersecurity threat monitoring,identifying and responding to security incidents, and collaborating withtechnical teams, business stakeholders, and vendors to strengthen the agency’soverall security posture. Strong analytical, troubleshooting, writtencommunication, and interpersonal skills are essential for success in this role.

Duties/Responsibilities:

• Assessand evaluate the organization's information security solutions, processes,systems, and networks to identify risks and recommend improvements.
  
• Providetechnical guidance on the design, implementation, and maintenance ofsecure IT systems and networks.
  
• Guideand mentor junior Security Analysts (Level I and II) in identifyingsecurity risks, investigating threats, and responding to securityincidents.
  
• Supportdaily Security Operations Center (SOC) activities, including securitymonitoring, alert analysis, threat detection, and incident response.
  
• Providehands-on support for cybersecurity tools, technologies, and securityoperations processes.
  
• Conductproactive threat hunting to identify suspicious activities, potentialvulnerabilities, and evidence of compromise.
  
• Performvulnerability assessments, security scanning, analysis of scan results,and manual validation of identified vulnerabilities.
  
• Monitorand manage security technologies, including firewalls, Intrusion Detectionand Prevention Systems (IDS/IPS), Security Information and EventManagement (SIEM) systems, and network security monitoring tools.
  
• Investigatecybersecurity incidents, collect evidence, analyze security events, andcoordinate incident response and remediation activities.
  
• Analyzeanomalous activities, security alerts, and potential threats affectingagency-connected systems and resources.
  
• Analyzenetwork traffic and security events using TCP/IP protocols and tools suchas Wireshark and tcpdump.
  
• Supportinformation security across operating systems and platforms, includingWindows, Linux, Android, iOS, MVS, VMware, cloud environments, andenterprise networks.
  
• Implementand maintain security controls based on defense-in-depth principles,including secure system configurations, network segmentation, andmalicious code protection.
  
• Identify,assess, and mitigate information security risks and threats affecting theconfidentiality, integrity, and availability of organizational data.
  
• Supportcompliance with applicable security policies, standards, and regulatoryframeworks, including CMS ARC-AMPE, NIST, COBIT, and FedRAMP.
  
• Assistwith Risk Management Framework (RMF) activities and integrate securityrequirements, controls, and documentation into the System Development LifeCycle (SDLC).
  
• Supportsecurity risk assessments and controls for cloud services, multi-tenantenvironments, third-party applications, and vendor-managed systems.
  
• Monitorsecurity dashboards, investigate alerts and anomalies, analyze findings,and coordinate with cross-functional teams to address security issues.
  
• Assistwith the secure implementation, operation, troubleshooting, and ongoingmaintenance of computer systems, software, hardware, networks, andcybersecurity technologies.
  
• Collaboratewith Office of Cybersecurity (OCS) staff, IT teams, agency leadership,business units, vendors, and other stakeholders to support cybersecurityoperations and compliance risk mitigation.
  
• Applystrong analytical, troubleshooting, communication, and problem-solvingskills to resolve complex cybersecurity challenges.
  
• Stayinformed about emerging cybersecurity threats, vulnerabilities, attacktechniques, and security technologies to improve the agency's securityposture.
  
• Performother information security and cybersecurity duties as assigned.
  

Requirements

Education and Certifications:

• Highschool diploma with six years of relevant work experience
  
• Bachelor’sdegree in information technology, computer science or a related technicalfield, with a minimum of 3 years of relevant work experience.
  

Required Skills:

• 6+ yearsof experience in IT System Security or System Administration.
  
• Experiencewith cybersecurity incident response procedures and practices.
  
• Intermediateproficiency in Microsoft Office applications, including Word, Excel,PowerPoint, and Visio, with experience using templates and styleguidelines to maintain branding consistency.
  

Preferred Skills:

• Priorexperience in Health Information Technology (HIT) environments.
  
• Experiencewith centralized log management systems and security monitoring tools.
  
• Familiaritywith information security regulatory requirements and standards, includingNIST 800 series and CMS ARC-AMPE.
  
• Experienceconducting or supporting information security compliance assessments andaudits.
  
• Previouswork or consulting experience with federal, state, city, or localgovernment agencies.
  
• InformationSecurity certifications such as: CompTIA, ISC(2), SANS GIAC, CCNASecurity, or similar
  

Additional Skills:

• Willingnessto learn new technologies, adapt to changing requirements, and take onadditional responsibilities.
  
• Abilityto work independently and collaboratively as part of a team.
  
• Strongcollaboration and coordination skills when working with multiple teams,stakeholders, and external vendors.
  
• Abilityto multitask, prioritize assignments, track progress, and effectivelyreport the status of assigned work.
  
• Strongtime management and organizational skills to manage competing prioritiesand meet deadlines in a results-oriented environment.
  
• Strongunderstanding of enterprise IT operations, information securityprinciples, and secure best practices.
  
• Excellentwritten and verbal communication skills, with the ability to communicateeffectively with technical and non-technical stakeholders.
  
• Abilityto adapt to changes, accept constructive feedback, and maintain flexibilitywhen working with leadership and teams with varying levels of technical andbusiness knowledge.
  

Standard Employee Benefits.

50% Health Insurance Paid by Innosoft, Paid Vacation, 401K Match, STD LTD and AD&D paid by Innosoft.