Security Analyst Needed in South Carolina

Position Title:  Security Analyst

Position Location: Hybrid - Columbia, South Carolina

***ONLY OPEN TO LOCAL CANDIDATES***

About the Role

We’re a security consulting company that helps clients deploy, optimize, and sustain their security tools. We’re looking for a Security Analyst who enjoys hands-on technical work and wants to build deep expertise across a leading security stack: Tenable, Palo Alto Cortex (XDR, XSIAM, and XSOAR), CrowdStrike, and Cribl.

You’ll work directly with client teams to deploy platforms, assess the health of existing environments, and troubleshoot issues, translating technical findings into clear recommendations. Experience with these tools is a plus, but not required. We’ll train you, and we care most about your technical foundation, problem-solving skills, and ability to work well with clients.

What You’ll Do

Learn and become proficient in our core technology partners, and use that knowledge to deliver client engagements:

Tenable: scanner and agent deployment, scan policy design, credentialed scanning, and reporting configuration

Palo Alto Cortex XDR: agent rollout and upgrades, endpoint policy and exception configuration, behavioral indicator of compromise (BIOC) and alert tuning, and agent health and connectivity validation

Palo Alto Cortex XSIAM: data source onboarding and ingestion, parsing and data modeling rules, XQL queries, correlation rule and analytics tuning, broker VM deployment, and platform health monitoring

Palo Alto Cortex XSOAR: integration configuration, playbook development and tuning, incident layouts and automation, engine deployment, content pack management, and troubleshooting failed integrations and playbook runs

CrowdStrike: sensor deployment, prevention and detection policy configuration, host group management, and sensor health validation

Cribl: source and destination setup, pipeline and routing design, data reduction and enrichment, and worker group health

Support and execute deployments, from kickoff and requirements gathering through configuration, testing, and handoff

Perform health checks on client environments, identifying misconfigurations, coverage gaps, outdated versions, and performance issues

Troubleshoot technical issues such as agent connectivity, data ingestion failures, scan errors, and integration problems, working to root cause and resolution

Deliver clear findings, recommendations, and remediation roadmaps to technical and non-technical stakeholders

Create documentation including design documents, runbooks, as-built diagrams, and knowledge transfer materials

Train client staff on tool usage and operational best practices

Track time, manage tasks, and keep project status current for engagement managers

Contribute to internal best practices, reusable deployment templates, and health check methodologies

Support clients through escalations and help identify opportunities for follow-on work

What We’re Looking For

Required

Solid foundation in cybersecurity concepts (vulnerability management, endpoint security, logging, and incident response)

Strong automation mindset

Working knowledge of Windows and Linux operating systems and core networking (TCP/IP, DNS, firewalls, proxies, certificates)

Strong troubleshooting skills and a methodical approach to isolating problems

Excellent written and verbal communication, with comfort presenting to clients

Ability to manage multiple tasks and prioritize across client engagements

Willingness to learn new technologies quickly and work independently

Willingness to travel occasionally for client engagements

Preferred

Hands-on experience with Tenable, Palo Alto Cortex (XDR, XSIAM, or XSOAR), CrowdStrike, or Cribl

Prior experience in consulting, professional services, managed services, or customer-facing technical roles

Experience deploying or administering security tools in enterprise environments

Familiarity with SIEM, SOAR, EDR/XDR, or log pipeline concepts

Scripting or automation experience (Python, PowerShell, Bash, or API usage), particularly Python for playbook and integration development

Experience with cloud platforms (AWS, Azure, or GCP)

Relevant certifications (e.g., Security+, CySA+, Tenable, CrowdStrike, Palo Alto Networks, or Cribl certifications)

Bachelor’s degree in cybersecurity, information technology, computer science, or equivalent experience

Residence in or near Columbia, SC

Physical Requirements:

Prolonged periods of sitting at a desk and working on a computer

Must be able to lift up to 15 pounds at times.