[Hiring] Cybersecurity Analyst @SYSTEMTEC

Role Description

SYSTEMTEC is seeking a Cybersecurity Analyst for a remote opportunity for candidates working EST hours. Candidate will support enterprise security operations by:

• Monitoring threats
• Investigating security incidents
• Strengthening detection and response capabilities within a large-scale Security Operations Center (SOC)
• Collaborating with technical teams and participating agencies to improve security practices
• Expanding the use of centralized security services

Qualifications

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Associate degree in Information Technology, Information Security, or a related field; alternatively, four or more years of relevant professional experience may substitute for the degree.
• At least two years of experience working with the MITRE ATT&CK framework for threat analysis, detection, or investigations.
• Minimum of two years of experience creating security dashboards, analyzing metrics, and preparing reports.
• Two or more years of experience in security monitoring, threat detection, and incident response.
• At least two years of experience supporting large-scale Security Operations Center (SOC) operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intelligence sources.
• Ability to investigate security incidents, determine root causes and impacts, document findings, and escalate critical threats appropriately.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to collaborate across technical teams and organizational stakeholders.

Requirements

• Advanced security certifications such as CISSP, CISA, CISO-related credentials, or equivalent qualifications.
• Additional certifications such as CEH, OSCP, GPEN, or relevant vendor-specific security credentials.
• Experience with Palo Alto Cortex XSIAM and/or XDR.
• Knowledge of firewall administration, VPN technologies, Active Directory, and intrusion detection/prevention systems.
• Familiarity with Linux, network administration, and network architecture.
• Experience with threat hunting, security playbooks, detection rule tuning, and reducing false-positive alerts.
• Preference for candidates based in Columbia, South Carolina, or surrounding areas who can accommodate onsite project needs.

Responsibilities

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify attack patterns, suspicious activity, and emerging threats.
• Investigate suspected security incidents, determine scope and root cause, assess potential impact, and escalate high-priority findings to Tier 3 analysts when appropriate.
• Respond to phishing reports, malware infections, and suspected policy violations by coordinating containment, remediation, and recovery activities.
• Produce incident reports, investigation timelines, and post-incident summaries; recommend preventive measures and improvements to security controls.
• Enhance SOC detection and response capabilities by refining alert thresholds, correlation rules, investigation workflows, and response playbooks; collaborate with engineering teams on monitoring tools and threat intelligence integration.
• Partner with agency representatives, security engineers, and SOC personnel to resolve issues, document operational procedures, promote centralized security services, and improve security operations.

Work Location

Remote. EST Hours.

Compensation / Benefits

• Full-Time Employment with SYSTEMTEC means competitive compensation.
• Access to health, dental, disability, and life coverage.
• 401(k) with match.

Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.