Junior Network Security Analyst - Security Analyst - Consultant

Title:Security Analyst - ConsultantLocation:Columbia SC 29201On-site/Remote/Hybrid: OnsiteDuration: 12 MonthsInterview Process: 1-2 Round VirtualNo of submissions: 2No of Positions: 1New Position - ongoing project with the Office of CybersecurityCandidate Location: Candidate MUST be a SC resident. No relocation allowedJob Description:SCOPE OF THE PROJECT:The Office of Cybersecurity ensures the confidentiality, integrity and availability of SCDHH's systems and services. Strong candidate must have hands-on experience with:• Data network design best practices• Routing and switching protocols• Network security best practices• On-premise and/or cloud networking environments•This role requires someone who can contribute independently on technical tasks and support more senior analysts on complex initiatives.POSITION TITLE: JUNIOR NETWORK SECURITY ANALYSTDAILY DUTIES / RESPONSIBILITIES:This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead.The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations.Security Program Experience:Strongly desired experience includes:• CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks• Performing repeatable security processes supporting compliant enterprise architectures• Supporting security considerations for multi-tenant cloud environments and vendor integrationsTechnical Experience:Candidates should have hands-on experience with:1. Secure network design principles2. Windows, macOS, and Linux operating systems3. Switching and Routing4. Enterprise Firewalls5. Network auditing6. IDS/IPS platforms7. Network security monitoring8. SIEM platforms such as QRadar, Splunk (Preferred)9. Vulnerability scanning tools (Nessus, Qualys, etc.)10. Cloud Infrastructure Security (Preferred)Essential Responsibilities:1. Assist in maturing network security and compliance solutions2. Investigate and respond to daily network alerts3. Perform network security assessments for proposed firewall and infrastructure changes4. Conduct technical analysis for network security planning and engineering5. Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency6. Analyze on-premise and cloud networks for potential threats7. Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services.8. Monitor emerging threat vectors and recommend countermeasures9. Collaborate with other areas of the agency to implement security controls10. Support cloud and on-premise network changes and enhancement projects11. Ensure compliance with ARC-AMPE, HIPAA and SCDIS-20012. Assist with KPI creation and trend report monitoring13. Participate in firewall configuration reviews and ruleset recertification14. Provide guidance on best practices to technical teams15. Perform additional SOC duties as assignedREQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):1. Approximately 3-5 years of hands-on experience in network design, implementation, orsupport2. Hand-on experience in IT security or system administration3. Working knowledge of secure network design, security architecture, compliance tools, dataprotection, and access models4. Ability to analyze logs, alerts, and network telemetry.5. Proficiency with Microsoft Office ToolsREQUIRED EDUCATION/CERTIFICATIONS:1. BS degree in Computer Science, information systems, Cybersecurity, or related field; or equivalent experience2. A network security centric certification such as PCNSE or CCNAPREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):1. Experience working in regulatory environments2. Experience supporting health IT or state government.3. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards4. Cloud network security controls (Azure or AWS)PREFERRED EDUCATION/CERTIFICATIONS:1. CISSP or Security+About Us:InterSources Inc, is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.