Security Analyst

The Office of Cybersecurity ensures the confidentiality, integrity, and availability of SCDHH’s systems and services. The ideal candidate should have strong hands-on experience with data network design best practices, routing and switching protocols, network security best practices, and on-premises and/or cloud networking environments. This role requires someone who can work independently on technical tasks while also supporting senior analysts on more complex cybersecurity and network initiatives.

• Hands-on technical role reporting directly to the Office of Cybersecurity SOC Lead.
  
• Support SCDHHS leadership, business units, partners, and vendors with day-to-day cybersecurity operations.
  
• Experience with security and compliance frameworks such as CMS ARC-AMPE, HIPAA, NIST, and FISMA RMF is strongly desired.
  
• Perform repeatable security processes supporting compliant enterprise architectures.
  
• Support security requirements for multi-tenant cloud environments and vendor integrations.
  
• Apply secure network design principles across enterprise environments.
  
• Hands-on experience with Windows, macOS, and Linux operating systems.
  
• Strong understanding of switching, routing, enterprise firewalls, and network auditing.
  
• Experience with IDS/IPS platforms and network security monitoring.
  
• Experience with SIEM platforms, preferably QRadar or Splunk.
  
• Experience with vulnerability scanning tools such as Nessus and Qualys.
  
• Cloud infrastructure security experience is preferred.
  
• Assist with improving and maturing network security and compliance solutions.
  
• Investigate, analyze, and respond to daily network security alerts.
  
• Perform security assessments for proposed firewall and infrastructure changes.
  
• Conduct technical analysis supporting network security planning and engineering.
  
• Review connectivity, website-blocking, and firewall-rule requests to identify potential security risks.
  
• Analyze on-premises and cloud networks for potential threats and vulnerabilities.
  
• Develop and review network traffic reports to identify violations involving approved ports, protocols, and services.
  
• Monitor emerging cyber threats and recommend appropriate countermeasures.
  
• Collaborate with agency teams to implement and maintain appropriate security controls.
  
• Support cloud and on-premises network changes, enhancements, and security projects.
  
• Help maintain compliance with ARC-AMPE, HIPAA, and SCDIS-200 requirements.
  
• Assist with security KPI development, reporting, and trend monitoring.
  
• Participate in firewall configuration reviews and ruleset recertification.
  
• Provide network and cybersecurity best-practice guidance to technical teams.
  
• Perform additional Security Operations Center (SOC) responsibilities as assigned.
  

Requirements

Education and Certifications:

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
  
• A network/security-focused certification, such as PCNSE (Palo Alto Networks Certified Network Security Engineer) or CCNA (Cisco Certified Network Associate).
  

Required Skills:

• Approximately 3–5 years of hands-on experience in network design, implementation, or support.
  
• Hands-on experience in IT security or system administration.
  
• Working knowledge of secure network design and security architecture.
  
• Knowledge of security compliance tools, data protection, and access-control models.
  
• Ability to analyze and interpret security logs, alerts, and network telemetry.
  
• Proficiency with Microsoft Office tools.
  

Preferred Skills:

• Experience working in regulated environments.
  
• Experience supporting Health IT and/or state government environments.
  
• Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards.
  
• Experience with cloud network security controls, particularly in Microsoft Azure or AWS environments
  
• CISSP or Security+
  

Benefits