Threat and Vulnerability Analyst / 61145319

State-of-South-Carolina; South Carolina; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health, Dental, Vision

30 PTO days equivalent benefits

Paid holidays

State Retirement Plan

Job summary

The State of South Carolina is seeking a Threat and Vulnerability Analyst to enforce security policies, manage audit-related activities, and drive risk remediations within the Agency Administration – Information Security team. You will coordinate security control reviews, maintain risk registers, and work with diverse stakeholders to strengthen SC DSS information systems.

Responsibilities include ongoing security monitoring, incident response planning, and collaboration with development teams to

Qualifications

• Bachelor's degree in information technology systems, computer science, or a related field.
• Minimum of three years in threat and vulnerability analysis or a related cybersecurity field.
• Relevant certifications such as CEH, CISSP, CISA or CompTIA Security+ are desirable.

Responsibilities

• Enforce information security policies and standards and support IT audits.
• Coordinate IT control matrices and annual security control reviews.
• Manage the Cyber Risk register and remediation strategies.
• Monitor security systems, logs, and alerts and report trends and issues.
• Collaborate with cross-functional teams to integrate security in development.
• Coordinate vulnerability assessments and penetration testing with third parties.
• Stay current with security trends, threats, and compliance requirements.
• Assist in incident response planning and execution, including investigations.

Skills

Threat analysis

Vulnerability assessment

Incident response

Security controls

Audit coordination

Documentation

Cross-functional collaboration

Education

Bachelor's degree in IT/CS or related field

Job description

Do you have a passion to provide meaningful contributions to your community? Would you like to be part of an organization whose central mission is helping to protect, stabilize and strengthen the lives of South Carolina's children, families, and vulnerable adults? If so, the SC Department of Social Services has the right job opportunity for you!

Job Duties:

• The Threat and Vulnerability Analyst is responsible for the enforcement of our application security policies and standards, while acting as the cornerstone for IT-related audits. Serves a critical role in change management ensuring documented, reviewed, and approved IT alterations are in line with agency policies. The Threat and Vulnerability Analyst coordinates the evolution of IT control matrices, facilitates annual security control reviews, and works with diverse stakeholders on documentation maintenance or development arising from audit findings. They are instrumental in managing the Cyber Risk register, developing remediation strategies, and contributing to the security awareness program.
• Regularly conduct security assessments to identify potential threats and vulnerabilities in the Agency's information systems.
• Develop, implement, and manage processes to mitigate identified security risks, including patch management and network configuration improvements.
• Continuously monitor security systems, logs, and alerts, and report on incidents, trends, and areas for improvement.
• Collaborate with cross-functional teams to ensure security measures are integrated into the development and deployment of information systems.
• Assist in ensuring that security controls are compliant with industry regulations and standards.
• Coordinate and participate in incident response planning and execution, including investigation and remediation of security breaches.
• Stay current with Trends: Keep up-to-date with the latest security trends, threats, vulnerabilities, and compliance requirements, attending relevant workshops and conferences as necessary.
• Coordinate and liaise with third-party vendors to conduct vulnerability assessments and penetration testing as required.
• Other duties as assigned.

A Bachelor's Degree in information technology systems, computer science, or a related field and three (3) years of experience in threat and vulnerability analysis, or related cybersecurity field. Relevant experience may be substituted for the Bachelor's Degree on a year-for-year basis.

Relevant certifications such as CEH, CISSP, CISA, or CompTIA Security+ are highly desirable.

This application for employment with the SC Department of Social Services must be completed in its entirety. A resume may be included; but shall not be substituted in lieu of the completion of this application in part or in whole. "See Resume" is not acceptable information for the completion of any part of the requirements of this application. Must possess a valid driver's license. The employee must be able to communicate effectively (written and orally) and write legibly. May be required to work after hours and/or some overnight travel and must be able to lift approximately 15-20 lbs. If you certify, by completion and submission of this application, that you possess educational credentials that qualify you for the available DSS positions, you will be required to provide a certified official transcript, if you are selected for job offer. The South Carolina Department of Social Services offers an exceptional benefits package that includes:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

Division: Agency Administration - Information Security / Richland County