Security Analyst - Entry - 26-01112

Datasoft Technologies, Inc.; Blythewood (SC); On-site; USD 42,000 - 60,000; Full time

Job summary

DataSoft Technologies, Inc. is seeking an entry-level security professional to join our security team in the United States. The role focuses on enhancing the security posture, monitoring threats, and assisting with incident response.

Selected candidates will receive training to perform tasks such as threat intelligence analysis, OSINT data gathering, and rule creation for SIEM and Defender for Endpoint. Knowledge of PowerShell and policy management is a plus.

Qualifications

• Understanding of security concepts and processes.
• Understanding of basic computer and network concepts.
• GIAC Security Essentials (GSEC) certification preferred.

Responsibilities

• Enhance the security posture of the client to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.
• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
• Document findings, such as new attack methods or vulnerabilities, and share with the team.
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
• Threat hunting and detection rule creation and refinement with SIEM queries or Defender for Endpoint rules.
• Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Escalate findings to senior analysts and maintain a log of recurring patterns for long-term tracking.
• Assist in initial triage of security incidents following response frameworks (e.g., NIST, MITRE).
• Document findings during incidents and contribute to containment and remediation efforts.
• Create clear, detailed reports, after-action reviews, and process documentation.
• Deliver reports on the security posture and propose mitigation strategies.
• Develop and deliver security awareness training and assess employee awareness through simulations.
• Leverage PowerShell, Group Policy, SCCM, and other tools for patch deployment and automation.

Job description

Enhance the security posture of the client to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.

• Our client is looking for candidates to fill an entry level security position. The client will train the selected candidate to perform the tasks listed below.
• At a minimum We are looking for basic server or network administration skills that we can build upon.
• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
• Document findings, such as new attack methods or vulnerabilities, and share with the team.
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
• 2. Threat Hunting and Detection Rule Creation
• Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
• Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
• Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules).
• Document hunting methodologies and findings to support continuous improvement.
• Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
• Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts.
• Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.
• Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE Telecommunication&CK).
• Identify and escal ... potential security threats.
• Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents.
• Document findings during incidents and contribute to containment and remediation efforts.
• 5. Documentation, Reporting, and Communication
• Create clear, detailed reports, including incident reports, after-action reviews, and process documentation.
• Deliver reports on the security posture and propose mitigation strategies.
• Draft training materials or guides to help improve organizational awareness and readiness.
• Regularly update and organize documentation to ensure accuracy and accessibility for team use.
• 6. Vulnerability Management
• Analyze reports, prioritize patching, and understand NIST best practices.
• 7. Security Awareness Training
• Develop and deliver training and assess employee awareness through simulations.
• 8. Security Automation and Scripting
• Leverage SCCM, GPO, and PowerShell for patch deployment.
• Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency.
• 9. Endpoint and Network Security
• Configure policies, analyze alerts, and manage endpoint protection.
• Understand network protocols and firewalls to strengthen the overall security posture.
• 10. Digital Forensics and Cloud Security
• Investigate security incidents and collect evidence for deeper analysis.
• Develop knowledge of cloud-specific security solutions as cloud adoption grows.

Required Skills (rank in order of Importance):

• Understanding of security concepts and processes
• Understanding of basic computer and network concepts

Preferred Skills

• 1+ Year of Experience in an IT Security Focused Role
• Experience with SIEM and Endpoint Security Tools
• Experience with PowerShell, Group Policy, and Endpoint Management
• Knowledge of Vulnerability Management and Cloud Security
• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• 1+ Years of Experience in Server or Network Administration

Additional Skills

• Problem-Solving: Analyze data, identify anomalies, and recommend solutions.
• Attention to Detail: Ensure accurate analysis and configuration for effective security measures.
• Ability to communicate and work effectively with a mid-size team

Required Education and experience: A

• High School Diploma is required at minimum Certifications: Not required, however we prioritize applicants who have:
• GIAC Security Essentials (GSEC)

Interview Process (who will conduct i/v,phone or in-person, how many rounds of i/v’s)?)

• Security Team Manager
• 2 rounds of interviews possible

About our Company

DataSoft Technologies is a highly recognized provider of professional IT Consulting services in the US. Founded in 1994, DataSoft Technologies, Inc. provides staff augmentation services for Information Technology and Automotive Services. Our team member benefits include: