{"id":3562188,"url":"https://alion.io/job/abacus-service-cybersecurity-analyst","title":"Cybersecurity Analyst","company":{"id":4443625,"name":"Abacus Service","domain":"abacusservice.com","url":"https://alion.io/company/abacus-service","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"Active Directory","optional":true},{"name":"Cortex","optional":true},{"name":"Linux","optional":true},{"name":"Microsoft Teams","optional":true},{"name":"Prometheus","optional":true},{"name":"VPN","optional":true}],"status":"closed","first_seen_at":"2026-10-27T16:09:34Z","employer_posted_date":null,"last_verified_at":"2026-11-01T16:52:45Z","board_verified":false,"closed_at":"2026-11-01T16:52:45Z","days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Position : Cybersecurity Analyst\nLocation : Columbia , SC – Remote Role\nClient : State of SC\nPosition id : 14215\n\nDaily Duties / Responsibilities:\nPREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN WORK ONSITE OVER HYBRID AND\nOVER FULL-TIME REMOTE (ON-SITE AS NEEDED).\n• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and\nthreat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.\n• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required.\n• Create detailed incident reports, timelines, and post-incident summaries; contribute\nto lessons-learned documentation and recommendations for remediation and preventative measures.\n• Investigate user-reported phishing, malware infections, and potential policy\nviolations; advise users and internal/external teams on containment and recovery actions.\n• Recommend updates to SOC playbooks and workflows based on real-world INVESTIGATIONS, fine-tune detection rules. Alert thresholds, and correlation logic to reduce false positives and improve threat coverage.\n• Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to date tactics, techniques, and procedures (TTPs)\n• Serve as a customer-facing SME, \"selling” the value of Client services by demonstrating capabilities and resolving issues.\n• Document processes, runbooks, and troubleshooting steps related to SOC operations.\n• Coordinate with engineering, SOC, and agency staff as needed to meet goals.\n• Other duties as needed.\nRequired Skills (rank in order of Importance):\n• 2+ Years of Experience with Security Monitoring and Incident Response.\n• 2+ Years of Experience with MITRE Telecommunication&CK framework.\n• 2+ Years of Experience with dashboard creation and reporting.\nPreferred Skills (rank in order of Importance):\n• Experience with the Palo Alto Cortex XSIAM/XDR platform.\n• Knowledge of Linux, network administration and network design.\n• Experience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems.\n• Candidate is local to Columbia, SC or surrounding city in South Carolina\n\nRequired Education/Certifications:\n• Associate's degree in an information technology or information security related field\n• Four years of relevant work experience may be substituted in lieu of education\n• Two years of experience in supporting large soc operations\nRequired Skills\nSkill Type\nSkill Name\n\nAssociate's degree in an information technology or information security related field or 4+ years of relevant work expeirence may be substituted in lieu of education\n\n2+ Years of Experience with MITRE Telecommunication&CK framework\n\n2+ Years of Experience with dashboard creation and reporting\n\n2+ Years of Experience with Security Monitoring and Incident Response\n\n2+ years of experience in supporting large SOC operations\nPreferred Skills\nSkill Type\nSkill Name\n\nCISSP, CISA, CISO or equivalent advanced security certification\n\nAdditional relevant certifications (e.g., CEH, OSCP, GPEN)\n\nVendor certifications related to information security\n\nExperience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems\n\nExperience with the Palo Alto Cortex XSIAM/XDR platform\n\nKnowledge of Linux, network administration and network design\n\nCandidate is local to Columbia, SC or surrounding city in South Carolina\n\nDaily Duties / Responsibilities:\nPREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN WORK ONSITE OVER HYBRID AND OVER FULL-TIME REMOTE (ON-SITE AS NEEDED).\nContinuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.\nPerform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required.\n\nCreate detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures.\nInvestigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions.\nRecommend updates to SOC playbooks and workflows based on real-world INVESTIGATIONS, fine-tune detection rules. Alert thresholds, and correlation logic to reduce false positives and improve threat coverage.\nCollaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to date tactics, techniques, and procedures (TTPs)\nServe as a customer-facing SME, \"selling” the value of Client services by demonstrating capabilities and resolving issues.\nDocument processes, runbooks, and troubleshooting steps related to SOC operations.\nCoordinate with engineering, SOC, and agency staff as needed to meet goals.\nOther duties as needed.\nRequired Skills (rank in order of Importance):\n2+ Years of Experience with Security Monitoring and Incident Response.\n2+ Years of Experience with MITRE Telecommunication&CK framework.\n2+ Years of Experience with dashboard creation and reporting.\nPreferred Skills (rank in order of Importance):\nExperience with the Palo Alto Cortex XSIAM/XDR platform.\nKnowledge of Linux, network administration and network design.\nExperience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems.\nCandidate is local to Columbia, SC or surrounding city in South Carolina\nRequired Education/Certifications:\nAssociate's degree in an information technology or information security related field\nFour years of relevant work experience may be substituted in lieu of education\nTwo years of experience in supporting large soc operations.\nPreferred Education/Certifications:\nCISSP, CISA, CISO or equivalent advanced security certification.\nAdditional relevant certifications (e.g., CEH, OSCP, GPEN).\nVendor certifications related to information security.\nInterview Process (phone, video or in-person, how many rounds of i/v's, etc)?\nInitial round of interviews on Microsoft Teams (on camera) with in-person interviews Preferred before final selection\nInterview Availability: How soon can you schedule an interview (date / times)?\nASAP after posting closes and resumes are received and reviewed","description_format":"text","description_chars":6693,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-31T04:54:45Z"},{"event":"close","at":"2026-11-01T16:52:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":92500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/abacus-service-cybersecurity-analyst","json_url":"https://alion.io/job/abacus-service-cybersecurity-analyst.json","meta":{"generated_at":"2026-11-02T18:55:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26387,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4443625},"rest":"https://alion.io/mcp/rest/get_company?id=4443625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fabacus-service-cybersecurity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fabacus-service-cybersecurity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fabacus-service-cybersecurity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/abacus-service-cybersecurity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fabacus-service-cybersecurity-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3562188}},{"tool":"search_jobs","arguments":{"company":"abacusservice.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3562188},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}