Security Analyst

The Office of Cybersecurity ensures the
confidentiality, integrity, and availability of SCDHH’s systems and services.
The ideal candidate should have strong hands-on experience with data network
design best practices, routing and switching protocols, network security best
practices, and on-premises and/or cloud networking environments. This role
requires someone who can work independently on technical tasks while also
supporting senior analysts on more complex cybersecurity and network
initiatives.

• Hands-on technical role reporting
  directly to the Office of Cybersecurity SOC Lead.
  
• Support SCDHHS leadership, business
  units, partners, and vendors with day-to-day cybersecurity operations.
  
• Experience with security and compliance
  frameworks such as CMS ARC-AMPE, HIPAA, NIST, and FISMA RMF is strongly
  desired.
  
• Perform repeatable security processes
  supporting compliant enterprise architectures.
  
• Support security requirements for
  multi-tenant cloud environments and vendor integrations.
  
• Apply secure network design principles
  across enterprise environments.
  
• Hands-on experience with Windows, macOS,
  and Linux operating systems.
  
• Strong understanding of switching,
  routing, enterprise firewalls, and network auditing.
  
• Experience with IDS/IPS platforms and
  network security monitoring.
  
• Experience with SIEM platforms,
  preferably QRadar or Splunk.
  
• Experience with vulnerability scanning
  tools such as Nessus and Qualys.
  
• Cloud infrastructure security experience
  is preferred.
  
• Assist with improving and maturing
  network security and compliance solutions.
  
• Investigate, analyze, and respond to
  daily network security alerts.
  
• Perform security assessments for proposed
  firewall and infrastructure changes.
  
• Conduct technical analysis supporting
  network security planning and engineering.
  
• Review connectivity, website-blocking,
  and firewall-rule requests to identify potential security risks.
  
• Analyze on-premises and cloud networks
  for potential threats and vulnerabilities.
  
• Develop and review network traffic
  reports to identify violations involving approved ports, protocols, and
  services.
  
• Monitor emerging cyber threats and
  recommend appropriate countermeasures.
  
• Collaborate with agency teams to
  implement and maintain appropriate security controls.
  
• Support cloud and on-premises network
  changes, enhancements, and security projects.
  
• Help maintain compliance with ARC-AMPE,
  HIPAA, and SCDIS-200 requirements.
  
• Assist with security KPI development,
  reporting, and trend monitoring.
  
• Participate in firewall configuration
  reviews and ruleset recertification.
  
• Provide network and cybersecurity
  best-practice guidance to technical teams.
  
• Perform additional Security Operations
  Center (SOC) responsibilities as assigned.
  

Requirements

Education and Certifications:

• Bachelor’s degree in Computer Science,
  Information Systems, Cybersecurity, or a related field, or equivalent
  professional experience.
  
• A network/security-focused certification,
  such as PCNSE (Palo Alto Networks Certified Network Security Engineer) or
  CCNA (Cisco Certified Network Associate).
  

Required Skills:

• Approximately 3–5 years of hands-on
  experience in network design, implementation, or support.
  
• Hands-on experience in IT security or
  system administration.
  
• Working knowledge of secure network
  design and security architecture.
  
• Knowledge of security compliance tools,
  data protection, and access-control models.
  
• Ability to analyze and interpret security
  logs, alerts, and network telemetry.
  
• Proficiency with Microsoft Office tools.
  

Preferred Skills:

• Experience working in regulated
  environments.
  
• Experience supporting Health IT and/or
  state government environments.
  
• Familiarity with FISMA, NIST, CMS
  ARC-AMPE, and HIPAA security and privacy standards.
  
• Experience with cloud network security
  controls, particularly in Microsoft Azure or AWS environments
  
• CISSP or Security+
  

Benefits