Security Analyst (W2 Role)

Job Description:
Position: Security Analyst
Location: Columbia, SC - Hybrid (3 days in office, 2 days remote)
Duration: 12 months contract with possible extension
Client: Direct

Security Analyst Position Summary/Job Purpose:
The purpose of this position is to support the agency’s cybersecurity and data protection program by helping protect sensitive information, monitor security risks, and strengthen controls around AI, Copilot, DLP, Insider Risk, auditing, and vendor security

Must Have/Required Skills:

• The candidate must have 3 years experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• The candidate must have 3 years hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI).
• The candidate must have 3 years experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.
• The candidate must also have 3 years of collaborating with technical and nontechnical teams to resolve security issues and supporting continuous improvement in the agency’s data security posture.

Preferred/Nice to Have Skills:

• Experience working with AI driven security tools, Cortex, particularly DSPM platforms designed to manage sensitive data used by AI systems, is preferred.
• Experience finetuning DLP policies, refining insider risk alerts, or supporting data governance programs is beneficial.
• Familiarity with Azure security, identity-based access controls, conditional access, and security automation or scripting is also preferred.

Required Education and/or Certifications:

• A bachelor’s degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered. A foundational security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required.
• Preferred certifications include Microsoft SC100, SC200, CEH, or an Associate level CISSP.

Required Skills:

• 3+ years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• 3+ years of hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI).
• 3+ years of experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.
• 3+ years of collaborating with technical and nontechnical teams to resolve security issues and supporting
• Security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required.