Job Description: Security Architect – Consultant
Client: State of South Carolina
Work Location: Fully Onsite – South Carolina
Position: Security Architect – Consultant
Position Overview
The State of South Carolina is seeking an experienced Security Architect – Consultant to support its Office of Cybersecurity in strengthening and advancing enterprise cybersecurity operations.
The ideal candidate will have extensive experience in cybersecurity operations, Security Operations Center (SOC) leadership, cyber threat detection, incident response, and enterprise infrastructure security across on-premises and cloud-based environments.
This position will work directly with the Chief Information Security Officer (CISO) to drive innovation, improve threat detection and response capabilities, and mature the organization's Security Operations Center (SOC).
Candidates should be highly organized, self-motivated, and capable of managing complex security initiatives while delivering quality results within defined deadlines.
Key Responsibilities
- Drive innovation and continuous improvement in Security Operations Center (SOC) capabilities.
- Serve as an escalation point for security incidents and provide technical leadership, mentorship, and guidance to SOC Analyst Levels I, II, and III.
- Oversee the identification, investigation, analysis, containment, and resolution of cybersecurity incidents.
- Lead and mentor Security Operations analysts, ensuring effective training and team development.
- Assist with staffing and resource planning for Security Operations.
- Perform cyber threat identification and risk analysis for the Medicaid Enterprise.
- Support the implementation and enhancement of continuous monitoring and incident response processes.
- Review and improve security playbooks, operational procedures, processes, and alert management.
- Conduct advanced threat hunting activities to identify potential attacker presence within the environment.
- Collaborate with IT, Application Development, and Business Teams to strengthen enterprise security.
- Lead cybersecurity projects and continuous improvement initiatives.
- Work with compliance teams to maintain audit readiness and meet applicable security requirements.
Required Skills and Experience
- 10+ years of IT experience working with Windows, Linux, and web-based applications.
- 5+ years of experience in enterprise infrastructure design and deployment.
- 5 years of related experience in a Security Operations Center (SOC) Lead capacity.
Preferred Skills and Experience
- Experience identifying, testing, and leading remediation efforts related to OWASP Top 10 and CWE/SANS Top 25 security vulnerabilities.
- Experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar regulatory requirements.
- Experience working with Enterprise Governance, Risk, and Compliance (eGRC) systems.
Required Education / Certifications
Candidates must possess any one or a combination of the following certifications:
- Certified Information Systems Security Professional (CISSP)
- GIAC Certified Incident Handler (GCIH)
- CompTIA Security+
Preferred Education / Certifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
- Cloud security certification (e.g., CASP+).
- Network Security certifications.
