Security Posture Analyst I (Remote)

SOUTHSTATE BANK, NATIONAL ASSOCIATION; United States; Remote; USD 65,000 - 90,000; Full time

Job summary

SouthState Bank, National Association is seeking a Security Posture Analyst I to monitor and report on the security posture of on‑premises, cloud, SaaS, and security technologies. You will provide actionable metrics, dashboards, and communications to stakeholders to drive informed risk decisions.

The role emphasizes correlation of data across security domains, vulnerability management, and continuous improvement of Threat Exposure Management with governance support and regulatory readiness.

Qualifications

• Bachelor's degree preferred in a related field or equivalent experience.
• 2–4 years of cybersecurity/IT experience is required or preferred.
• Certifications such as Security+ or equivalent are a plus.

Responsibilities

• Monitor and assess the security posture across on‑premises, cloud, and SaaS environments.
• Develop and publish security posture scorecards, dashboards, and KPI/KRIs.
• Analyze vulnerabilities, misconfigurations, and exposed assets to prioritize remediation.
• Correlate data across security, cloud, vulnerability, asset, and threat intel platforms.
• Track remediation efforts and provide governance support for risk reduction.
• Support regulatory, audit, and internal assessment activities with evidence collection.

Skills

Security posture monitoring

Risk assessment

Vulnerability analysis

Threat intelligence

Data analysis

Security reporting

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, Data Analytics

Job description

The SouthState story is one of steady growth, deep community roots, and an unwavering commitment to helping our customers move forward. Since our beginnings in the 1930s to becoming a trusted financial partner across the South and beyond - we are known for combining personal relationships with forward-thinking solutions.

We are committed to helping our team members find their success while maintaining the integrity of our values: building trust, fostering lasting relationships and pursuing excellence. At SouthState, individual contributions are recognized, potential is cultivated and team members are inspired to achieve their greater purpose. Your future begins here!

Summary

The Security Posture Analyst I supports the Cyber Threat Exposure Management program by monitoring, analyzing, and reporting on the security posture of the Company's on-premises, cloud, SaaS, and security technology environments. This role helps provide visibility into control effectiveness, exposure trends, configuration drift, and emerging risks through actionable metrics, dashboards, and reporting. The position enables informed risk-based decision making by ensuring security posture data is accurate, measurable, and effectively communicated to stakeholders.

Duties & Responsibilities

• Enterprise Security Posture Monitoring - Monitor and assess the security posture of on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments to identify exposure, control weaknesses, configuration drift, and emerging security risks.
• Security Metrics, KRIs & Executive Reporting - Develop, maintain, and publish security posture scorecards, dashboards, KPIs, KRIs, trend analysis, and management reporting that measure exposure, control effectiveness, remediation performance, asset coverage, and alignment to established risk tolerances.
• Exposure Analysis & Risk Prioritization - Analyze vulnerabilities, misconfigurations, exposed assets, and control deficiencies to identify material exposures and support risk-based remediation prioritization using threat intelligence, exploitability, business criticality, and potential business impact.
• Posture Data Management & Analytics - Correlate, validate, normalize, and analyze information across security, cloud, SaaS, vulnerability management, asset management, and threat intelligence platforms to ensure accurate risk representation and identify systemic weaknesses, coverage gaps, and emerging trends.
• Remediation Oversight & Risk Governance Support - Monitor remediation activities, validate corrective actions, track exposure reduction efforts, support escalation processes, and provide posture visibility that promotes accountability for risk reduction and compliance with security standards and service level objectives
• Compliance, Assessments & Program Maturity - Support regulatory, audit, risk management, and internal assessment activities through posture reporting and evidence collection while identifying opportunities to improve visibility, automation, measurement capabilities, and overall Threat Exposure Management program effectiveness.

It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Qualifications

Education Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Analytics, or a related field preferred.

Equivalent education, military experience, certifications, or relevant work experience may be considered.

Minimum Experience

2-4 years of experience in cybersecurity, information technology, risk management, technical analysis, security operations, or a related field.

Experience gained through internships, co-op programs, military service, help desk support, systems administration, security operations, or similar technical roles is preferred.

Exposure to vulnerability management, cloud security, security monitoring, identity security, endpoint security, attack surface management, or security reporting platforms is beneficial.

Licenses & Certifications

No certification required.

Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, Microsoft AZ-900, or equivalent entry-level cybersecurity or cloud certifications.

Knowledge, Skills, & Abilities

Working knowledge of cybersecurity principles, security controls, vulnerability management, attack surface management, secure configuration practices, and risk-based security decision making.

Foundational understanding of on-premises infrastructure, cloud computing platforms, SaaS technologies, networking, identity and access management, endpoint security, and enterprise technology environments.

Ability to interpret, analyze, and correlate security data from multiple sources to identify trends, control