IT Security Analyst ? Entry Level

IT Security Analyst ? Entry Level

Project Overview

The South Carolina Department of Motor Vehicles (SCDMV) is focused on maintaining secure and efficient IT systems that protect sensitive citizen information and ensure the integrity of motor vehicle licensing and titling data. The objective of this engagement is to strengthen the agency?s overall security posture, safeguard critical systems and data, reduce security risks, and support a security-focused IT environment that maintains public trust.

Duties/Responsibilities:

Entry-Level Security Position

• Support the DMV Security Team in day-to-day cybersecurity activities.
  
• Receive training to perform assigned security responsibilities.
  
• Apply basic server or network administration skills as a foundation for cybersecurity responsibilities.
  

Threat Intelligence Research

• Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
  
• Document new attack methods, vulnerabilities, and other threat findings.
  
• Share relevant threat intelligence findings with the security team.
  
• Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
  

Threat Hunting and Detection Rule Creation

• Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
  
• Utilize threat feeds to support threat-hunting activities.
  
• Investigate suspicious activity across network and endpoint environments.
  
• Stay current on emerging cybersecurity threats.
  
• Collaborate with senior analysts to refine and test detection rules.
  
• Assist with SIEM queries and Microsoft Defender for Endpoint detection rules.
  
• Document threat-hunting methodologies and findings to support continuous improvement.
  

Log Analysis

• Review and interpret firewall, endpoint, and server logs.
  
• Identify indicators of compromise (IOCs).
  
• Identify anomalous IP addresses, unauthorized access attempts, and other suspicious activity.
  
• Escalate identified security findings to senior analysts.
  
• Maintain records of recurring patterns and anomalies for long-term tracking and analysis.
  

Incident Response

• Assist with the initial triage of cybersecurity incidents.
  
• Follow incident response frameworks such as NIST and MITRE ATT&CK.
  
• Identify and escalate potential security threats.
  
• Gather relevant evidence during security incidents.
  
• Analyze logs and alert data to determine the scope and severity of incidents.
  
• Document findings during incident investigations.
  
• Contribute to incident containment and remediation efforts.
  

Documentation, Reporting, and Communication

• Create clear and detailed incident reports.
  
• Prepare after-action reviews following security incidents.
  
• Develop and maintain security process documentation.
  
• Deliver reports on the organization?s security posture.
  
• Propose appropriate security mitigation strategies.
  
• Draft training materials and security guides to improve organizational awareness and readiness.
  
• Regularly update and organize documentation to maintain accuracy and accessibility for team use.
  

Vulnerability Management

• Analyze vulnerability reports.
  
• Prioritize patching and remediation activities.
  
• Understand and apply NIST best practices related to vulnerability management.
  
• Security Awareness Training
  
• Develop security awareness training.
  
• Deliver security awareness training to employees.
  
• Conduct or support security awareness simulations.
  
• Assess employee security awareness through simulations.
  

Security Automation and Scripting

• Leverage SCCM for patch deployment.
  
• Use Group Policy (GPO) to support patch deployment and security administration.
  
• Use PowerShell for patch deployment and automation.
  
• Automate tasks beyond SCCM, GPO, and PowerShell to increase operational efficiency.
  

Endpoint and Network Security

• Configure endpoint security policies.
  
• Analyze endpoint security alerts.
  
• Manage and support endpoint protection.
  
• Apply knowledge of network protocols to security activities.
  
• Apply knowledge of firewalls to strengthen network security.
  
• Support efforts to improve the organization?s overall security posture.
  

Digital Forensics and Cloud Security

• Investigate cybersecurity incidents.
  
• Collect evidence related to security incidents for deeper analysis.
  
• Support digital forensic investigation activities.
  
• Develop knowledge of cloud-specific security solutions.
  
• Support security requirements as the organization?s cloud adoption grows.
  

Requirements

Education and Certifications:

• High School Diploma is required; minimum GIAC Security Essentials (GSEC)
  
• CompTIA Security+
  
• CompTIA Network+
  
• GIAC Certified Incident Handler (GCIH)
  

Required Skills:

Understanding of security concepts and processes.

Understanding of basic computer and network concepts.

Preferred Skills:

• 1+ year of experience in an IT security-focused role.
  
• Experience with SIEM and endpoint security tools.
  
• Experience with PowerShell, Group Policy (GPO), and endpoint management.
  
• Knowledge of vulnerability management and cloud security.
  
• Bachelor?s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
  
• 1+ year of experience in server or network administration.
  

Additional Skills:

• Problem-Solving: Ability to analyze data, identify anomalies, and recommend appropriate solutions.
  
• Attention to Detail: Ability to perform accurate analysis and configuration to support effective security measures.
  
• Team Collaboration & Communication: Ability to communicate clearly and work effectively within a mid-sized team environment.
  

Benefits