Security Analyst

Position: Security Analyst
Location: 3 Days Onsite - 2 day Remote in Columbia SC
Duration: 12 Months + Extendable

Position Details:

Must Have/Required Skills

The candidate must have 3 years experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis. The candidate must have 3 years hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI).
The candidate must have 3 years experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.

The candidate must also have 3 years of collaborating with technical and nontechnical teams to resolve security issues and supporting continuous improvement in the agency's data security posture.

Required Experience

• 3+ years supporting enterprise cybersecurity operations.
• 3+ years of incident response, threat monitoring, and risk analysis.
• 3+ years of hands-on experience with:
  • Data Loss Prevention (DLP)
  • Insider Risk Management
  • Data Security Posture Management (DSPM)
• 3+ years reviewing and triaging security alerts.
• 3+ years investigating sensitive data access and movement.
• 3+ years documenting findings and escalating incidents.
• 3+ years collaborating with technical and business teams to improve security posture.

Preferred/Nice to Have Skills

Required Education and/or Certifications

• A bachelor's degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered. A foundational security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required.
• Preferred certifications include Microsoft SC100, SC200, CEH, or an Associate level CISSP.

Security Analyst Position Summary/Job Purpose:

• Monitor and administer Data Loss Prevention (DLP) policies and controls.
• Investigate potential data loss, data exposure, and unauthorized access incidents.
• Support Data Security Posture Management (DSPM) initiatives related to AI and Copilot.
• Review the movement, storage, and sharing of sensitive information.
• Assist in implementation of data classification and data handling requirements.
• Participate in data governance initiatives and support data owners and stewards.

• Review and triage security alerts from DLP, Insider Risk Management, DSPM, and other security platforms.
• Investigate suspicious activity involving sensitive information.
• Document findings and maintain investigation records.
• Escalate incidents according to agency incident response procedures.
• Assist with containment, recovery, and post-incident activities.

• Monitor Insider Risk Management alerts and cases.
• Analyze user activity associated with potential policy violations.
• Conduct investigations while maintaining confidentiality and proper chain of evidence.
• Recommend corrective actions and risk mitigation strategies.

• Participate in third-party and vendor security assessments.
• Review vendor security documentation, audit reports, and questionnaires.
• Identify cybersecurity risks associated with third-party services.
• Assist in tracking remediation efforts and risk acceptance decisions.

• Support cybersecurity audits and compliance reviews.
• Collect and analyze evidence for regulatory and policy requirements.
• Assist with risk assessments and control validation activities.
• Maintain documentation supporting compliance efforts.