Cybersecurity Analyst

SYSTEMTEC is seeking a Cybersecurity Analyst for a remote opportunity for candidates working EST hours. Candidate will support enterprise security operations by monitoring threats, investigating security incidents, and strengthening detection and response capabilities within a large-scale Security Operations Center (SOC). This role will also collaborate with technical teams and participating agencies to improve security practices and expand the use of centralized security services.

Required Qualifications of the Cybersecurity Analyst:

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Associate degree in Information Technology, Information Security, or a related field; alternatively, four or more years of relevant professional experience may substitute for the degree.
• At least two years of experience working with the MITRE ATT&CK framework for threat analysis, detection, or investigations.
• Minimum of two years of experience creating security dashboards, analyzing metrics, and preparing reports.
• Two or more years of experience in security monitoring, threat detection, and incident response.
• At least two years of experience supporting large-scale Security Operations Center (SOC) operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intelligence sources.
• Ability to investigate security incidents, determine root causes and impacts, document findings, and escalate critical threats appropriately.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to collaborate across technical teams and organizational stakeholders.

Preferred Skills/Experience of the Cybersecurity Analyst:

• Advanced security certifications such as CISSP, CISA, CISO-related credentials, or equivalent qualifications.
• Additional certifications such as CEH, OSCP, GPEN, or relevant vendor-specific security credentials.
• Experience with Palo Alto Cortex XSIAM and/or XDR.
• Knowledge of firewall administration, VPN technologies, Active Directory, and intrusion detection/prevention systems.
• Familiarity with Linux, network administration, and network architecture.
• Experience with threat hunting, security playbooks, detection rule tuning, and reducing false-positive alerts.
• Preference for candidates based in Columbia, South Carolina, or surrounding areas who can accommodate onsite project needs.

Responsibilities of the Cybersecurity Analyst:

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify attack patterns, suspicious activity, and emerging threats.
• Investigate suspected security incidents, determine scope and root cause, assess potential impact, and escalate high-priority findings to Tier 3 analysts when appropriate.
• Respond to phishing reports, malware infections, and suspected policy violations by coordinating containment, remediation, and recovery activities.
• Produce incident reports, investigation timelines, and post-incident summaries; recommend preventive measures and improvements to security controls.
• Enhance SOC detection and response capabilities by refining alert thresholds, correlation rules, investigation workflows, and response playbooks; collaborate with engineering teams on monitoring tools and threat intelligence integration.
• Partner with agency representatives, security engineers, and SOC personnel to resolve issues, document operational procedures, promote centralized security services, and improve security operations.

Work Location: Remote. EST Hours.

Compensation / Benefits:
Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***