{"id":2890294,"url":"https://alion.io/job/novalink-solutions-llc-security-analyst","title":"Security Analyst","company":{"id":4449854,"name":"NOVALINK SOLUTIONS LLC","domain":"novalink-solutions.com","url":"https://alion.io/company/novalink-solutions-llc","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbia, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":196000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"SIEM","optional":false},{"name":"VMWare","optional":false},{"name":"Windows","optional":false},{"name":"Defense in Depth","optional":true},{"name":"Microsoft Office","optional":true},{"name":"TCP/IP","optional":true},{"name":"Tcpdump","optional":true},{"name":"Wireshark","optional":true}],"status":"live","first_seen_at":"2026-10-20T01:56:37Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T12:38:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"The Security Analyst is a hands-on role within the South Carolina Department of Health\nand Human Services (SCDHHS) Office of Cybersecurity (OCS) that will play an integral\nrole in the active defense of the systems and networks at SCDHHS.\nThe Security Analyst will support the establishment, implementation and/or enhancement\nof Information Systems’ Security and Compliance efforts based on Federal, State and\nAgency Policy/Standards. The Security Analyst must have foundational technical\nknowledge of IT systems’ security, network security and administrative tasks, be a strong\noral and written communicator, and be eager to interact with SCDHHS technical staff,\nbusiness unit representatives, stakeholders and vendors.\nWHY IS THIS POSITION OPEN (new role, increased workload, new dept, resignation, promotion)?\nIf backfill Position - What separated the candidate you initially selected from all the other\nresumes presented?\n36 MONTH RENEWAL\nWHAT TYPES OF STAFFING CHALLENGES OR HEADACHES HAVE YOU EXPERIENCED IN THE PAST?\nRecruiters submitting clearly unqualified candidates\no Such as non-technical consultants for HANDS-ON positions\nCommuting candidates not understanding the challenges of an onsite position\nProven experience in similar efforts and environments is mandatory\nThis position requires excellent written and verbal communications skills,\nparticularly the ability to accurately assess, document and report on technical\nprocesses and routines\nSCOPE OF THE PROJECT:\nThe SCDHHS Office of Cybersecurity (OCS) is tasked with performing ongoing\nenterprise cybersecurity threat monitoring and incident response capabilities. A strong\ncandidate for this position should possess experience or knowledge in the following:\nCyber Threat Response and Incident Handling\nCyber Security Operations\nPenetration Testing\nNetwork Security\nPOSITION TITLE: SECURITY ANALYST (CONSULTANT)\nPRE-EMPLOYMENT CHECKS (drug, credit, criminal, motor vehicle)?\nCriminal/ E-Verify/Credit and DHHS Confidentiality form.\nDAILY DUTIES / RESPONSIBILITIES:\nThe Security Analyst is primarily responsible for assessing and evaluating the\norganization’s information & cyber security solutions and processes, as well as providing\ntechnical advisory to influence the design and implementation of security information\ntechnology systems and networks. The Security Analyst will guide junior analyst\n(Security Analyst I and II) to identify and address risks and lead the response to\ninformation security issues.\nCandidates should be self-starters, creative problem solvers and have an eagerness to\nimplement tactics, techniques and procedures which make the most effective use of\nAgency staff, resources, products and technologies quickly.\nTechnical Knowledge:\nUnderstanding of information technology and security concepts.\nExperience or knowledge of operating systems (e.g., Android, iOS, Linux, Windows,\nMVS, VMWare), cloud computing, networks, hardware and software platforms, and\nprotocols as they relate to information security.\nExperience or knowledge in performing vulnerability assessments, including scanning,\nanalysis of results, and manual validation.\nExperience with secure networking technologies such as network firewalls and IDS/IPS\ntechnologies, Network Security Monitoring expertise, and Security Information and\nEvent Management (SIEM) systems.\nExperience in information security incident response and risk management.\nExperience managing and responding to information security risks, threats and incidents.\nThreat and vulnerability management; awareness of current threats to confidentiality,\nintegrity, and availability of data and controls to mitigate threats\nStrong working knowledge of applicable internal and/or external regulatory policies,\nstandards, procedures and controls (e.g., Centers for Medicaid and Medicare (CMS)\nARC-AMPE, National Institute of Standards and Technology (NIST), Control Objectives\nfor Information and Related Technology (COBIT), and Federal Risk and Authorization\nManagement Program (FedRAMP).\nExperience or knowledge with development and integration of RMF tasks and artifacts\ninto the System Development Life Cycle (SDLC) is ideal.\nExperience or knowledge in security as related to multi-tenant, cloud services and vendor\ninterface management would be considered desirable for this position.\nWorking knowledge of TCP/IP and the functioning of its component protocols, ability to\nread, and analyze, using various toolsets such as tcpdump, wireshark, etc; how they work\nand what information they produce will be beneficial in this role.\nUnderstanding basic defense-in-depth principles such as secure system configuration,\nnetwork segmentation and malicious code protection is a plus.\nInformation Systems’ Security Experience:\nExperience working in a SOC environment is preferred.\nExperience in operating and contributing to a security operations center responding to\nalerts and anomalies, creating and interpreting dashboards and triaging cross-functional\nteams is preferred.\nHands-on experience in the secure implementation, operation and on-going maintenance\nof computer systems, software, hardware and networks is preferred.\nGeneral Duties and Responsibilities:\n1. Assist in the day-to-day duties of SOC monitoring activities, tools and processes\n2. Provide hands-on support of OCS security tools\n3. Conduct threat hunts (specialized searches) for evidence of compromise\n4. Monitor security technologies for alerts\n5. Investigating incidents, gathering evidence, and analyzing data\n6. Analyze anomalous activity and potential threats to Agency connected resources\n7. Collaborate with OCS Staff and other agency staff, leadership, business partners\nand other parties/stakeholders to support security and compliance risk mitigation\nefforts\n8. Other duties as assigned\nREQUIRED SKILLS (RANK IN ORDER OF\nIMPORTANCE):\n1. 6+ years of experience in IT System\nSecurity or System Administration\n2. Experience with incident response\nprocedures and practices\n3. Must have intermediate skills in\nMicrosoft Office products (Word,\nExcel, PowerPoint, Visio) to\ninclude working with templates and\nstyle guidelines for branding\nconsistency\nPREFERRED SKILLS (RANK IN ORDER OF\nIMPORTANCE):\n1. Prior Health Information\nTechnology experience\n2. Centralized Log Management\nexperience\n3. Familiarity with security regulatory\nrequirements and standards (such as\nNIST 800 series, ARC-AMPE)\n4. Experience performing or\nsupporting information security\ncompliance assessments and audits\n5. Work and/or consulting experience\nin federal, state, city or local\ngovernment\nREQUIRED EDUCATION/CERTIFICATIONS:\n1. High school diploma with six years\nof relevant work experience\nPREFERRED EDUCATION/CERTIFICATIONS:\n1. Bachelor’s degree in information\ntechnology, computer science,\nrelated technical field- with a\nminimum of 3 years relevant work\nexp.\n2. Information Security certifications\nsuch as: CompTIA, ISC(2), SANS\nGIAC, CCNA Security, or similar\nINTERVIEW PROCESS (phone, video or in-\nperson, how many rounds of interviews, etc.)?\nVirtual/Online\nADDITIONAL SKILLS::\n1. Must be willing to learn and take on\nnew tasks\n2. Willingness to work independently\nand as a member of a team\n3. Willingness to collaborate and\ncoordinate with multiple teams and\nvendors\n4. Ability to multitask and prioritize\ntasks effectively in order to\neffectively report on the status of\nassigned work\n5. Ability to multitask and prioritize\ntasks effectively in order to meet\ndeadlines in a results-oriented\nenvironment\n6. Strong understanding of enterprise\noperations & secure best practices\n7. Strong written and verbal\ncommunication skills.\n8. Ability to accept changes and\nconstructive criticism and remain\nflexible in dealing with leadership\nand teams of varying technical and\nbusiness knowledge\nRequirements\nThe Security Analyst is a hands-on role within the South Carolina Department of Health and Human Services (SCDHHS) Office of Cybersecurity (OCS) that will play an integral role in the active defense of the systems and networks at SCDHHS. \nThe Security Analyst will support the establishment, implementation and/or enhancement of Information Systems’ Security and Compliance efforts based on Federal, State and Agency Policy/Standards. The Security Analyst must have foundational technical knowledge of IT systems’ security, network security and administrative tasks, be a strong oral and written communicator, and be eager to interact with SCDHHS technical staff, business unit representatives, stakeholders and vendors.\nDAILY DUTIES / RESPONSIBILITIES:\nThe Security Analyst is primarily responsible for assessing and evaluating the organization’s information & cyber security solutions and processes, as well as providing technical advisory to influence the design and implementation of security information technology systems and networks. The Security Analyst will guide junior analyst (Security Analyst I and II) to identify and address risks and lead the response to information security issues.\nCandidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.\nTechnical Knowledge:\nUnderstanding of information technology and security concepts.\nExperience or knowledge of operating systems (e.g., Android, iOS, Linux, Windows, MVS, VMWare), cloud computing, networks, hardware and software platforms, and protocols as they relate to information security.\nExperience or knowledge in performing vulnerability assessments, including scanning, analysis of results, and manual validation.\nExperience with secure networking technologies such as network firewalls and IDS/IPS technologies, Network Security Monitoring expertise, and Security Information and Event Management (SIEM) systems. \nExperience in information security incident response and risk management.\nExperience managing and responding to information security risks, threats and incidents.\nThreat and vulnerability management; awareness of current threats to confidentiality, integrity, and availability of data and controls to mitigate threats\nStrong working knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., Centers for Medicaid and Medicare (CMS) ARC-AMPE, National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technology (COBIT), and Federal Risk and Authorization Management Program (FedRAMP).\nExperience or knowledge with development and integration of RMF tasks and artifacts into the System Development Life Cycle (SDLC) is ideal.\nExperience or knowledge in security as related to multi-tenant, cloud services and vendor interface management would be considered desirable for this position.\nWorking knowledge of TCP/IP and the functioning of its component protocols, ability to read, and analyze, using various toolsets such as tcpdump, wireshark, etc; how they work and what information they produce will be beneficial in this role.\nUnderstanding basic defense-in-depth principles such as secure system configuration, network segmentation and malicious code protection is a plus.\nInformation Systems’ Security Experience:\nExperience working in a SOC environment is preferred.\nExperience in operating and contributing to a security operations center responding to alerts and anomalies, creating and interpreting dashboards and triaging cross-functional teams is preferred.\nHands-on experience in the secure implementation, operation and on-going maintenance of computer systems, software, hardware and networks is preferred.\nGeneral Duties and Responsibilities:\n1. Assist in the day-to-day duties of SOC monitoring activities, tools and processes\n2. Provide hands-on support of OCS security tools\n3. Conduct threat hunts (specialized searches) for evidence of compromise\n4. Monitor security technologies for alerts\n5. Investigating incidents, gathering evidence, and analyzing da...","description_format":"text","description_chars":14234,"description_truncated":true,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-20T01:56:37Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["conf:2","agency","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/novalink-solutions-llc-security-analyst","json_url":"https://alion.io/job/novalink-solutions-llc-security-analyst.json","meta":{"generated_at":"2026-10-21T15:29:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22033,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4449854},"rest":"https://alion.io/mcp/rest/get_company?id=4449854"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnovalink-solutions-llc-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnovalink-solutions-llc-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnovalink-solutions-llc-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/novalink-solutions-llc-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnovalink-solutions-llc-security-analyst"}]}