Security Analyst Needed in South Carolina

Position Title: Security Analyst

Position Location: Hybrid - Columbia, South Carolina

***ONLY OPEN TO LOCAL CANDIDATES***



About the Role

We're a security consulting company that helps clients deploy, optimize, and sustain their security tools. We're looking for a Security Analyst who enjoys hands-on technical work and wants to build deep expertise across a leading security stack: Tenable, Palo Alto Cortex (XDR, XSIAM, and XSOAR), CrowdStrike, and Cribl.

You'll work directly with client teams to deploy platforms, assess the health of existing environments, and troubleshoot issues, translating technical findings into clear recommendations. Experience with these tools is a plus, but not required. We'll train you, and we care most about your technical foundation, problem-solving skills, and ability to work well with clients.

What You'll Do

• Learn and become proficient in our core technology partners, and use that knowledge to deliver client engagements:
• Tenable: scanner and agent deployment, scan policy design, credentialed scanning, and reporting configuration
• Palo Alto Cortex XDR: agent rollout and upgrades, endpoint policy and exception configuration, behavioral indicator of compromise (BIOC) and alert tuning, and agent health and connectivity validation
• Palo Alto Cortex XSIAM: data source onboarding and ingestion, parsing and data modeling rules, XQL queries, correlation rule and analytics tuning, broker VM deployment, and platform health monitoring
• Palo Alto Cortex XSOAR: integration configuration, playbook development and tuning, incident layouts and automation, engine deployment, content pack management, and troubleshooting failed integrations and playbook runs
• CrowdStrike: sensor deployment, prevention and detection policy configuration, host group management, and sensor health validation
• Cribl: source and destination setup, pipeline and routing design, data reduction and enrichment, and worker group health
• Support and execute deployments, from kickoff and requirements gathering through configuration, testing, and handoff
• Perform health checks on client environments, identifying misconfigurations, coverage gaps, outdated versions, and performance issues
• Troubleshoot technical issues such as agent connectivity, data ingestion failures, scan errors, and integration problems, working to root cause and resolution
• Deliver clear findings, recommendations, and remediation roadmaps to technical and non-technical stakeholders
• Create documentation including design documents, runbooks, as-built diagrams, and knowledge transfer materials
• Train client staff on tool usage and operational best practices
• Track time, manage tasks, and keep project status current for engagement managers
• Contribute to internal best practices, reusable deployment templates, and health check methodologies
• Support clients through escalations and help identify opportunities for follow-on work

What We're Looking For

Required

• Solid foundation in cybersecurity concepts (vulnerability management, endpoint security, logging, and incident response)
• Strong automation mindset
• Working knowledge of Windows and Linux operating systems and core networking (TCP/IP, DNS, firewalls, proxies, certificates)
• Strong troubleshooting skills and a methodical approach to isolating problems
• Excellent written and verbal communication, with comfort presenting to clients
• Ability to manage multiple tasks and prioritize across client engagements
• Willingness to learn new technologies quickly and work independently
• Willingness to travel occasionally for client engagements

Preferred

• Hands-on experience with Tenable, Palo Alto Cortex (XDR, XSIAM, or XSOAR), CrowdStrike, or Cribl
• Prior experience in consulting, professional services, managed services, or customer-facing technical roles
• Experience deploying or administering security tools in enterprise environments
• Familiarity with SIEM, SOAR, EDR/XDR, or log pipeline concepts
• Scripting or automation experience (Python, PowerShell, Bash, or API usage), particularly Python for playbook and integration development
• Experience with cloud platforms (AWS, Azure, or Google Cloud Platform)
• Relevant certifications (e.g., Security+, CySA+, Tenable, CrowdStrike, Palo Alto Networks, or Cribl certifications)
• Bachelor's degree in cybersecurity, information technology, computer science, or equivalent experience
• Residence in or near Columbia, SC

Physical Requirements:

• Prolonged periods of sitting at a desk and working on a computer
• Must be able to lift up to 15 pounds at times.