Req number:

Employment type:

Worksite flexibility:

Who we are

CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary

Job Description

We are looking for a Security Analyst-Project Lead to support security incident response operations. This position will be full-time contract and hybrid in Columbia, SC.

Only work authorizations not requiring sponsorship now or in the future will be considered. Local candidates only, please.

What You’ll Do

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents
• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required
• Create detailed incident reports, timelines, and post-incident summaries and contribute to lessons-learned documentation and recommendations for remediation and preventative measures
• Investigate user-reported phishing, malware infections, and potential policy violations and advise users and internal and external teams on containment and recovery actions
• Recommend updates to SOC playbooks and workflows based on real-world investigations, fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
• Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned, integrate new threat intelligence feeds into workflows, and proactively hunt for threats using up-to-date tactics, techniques, and procedures (TTPs)
• Serve as a customer-facing SME, demonstrating capabilities and resolving issues while communicating the value of services provided
• Document processes, runbooks, and troubleshooting steps related to SOC operations
• Coordinate with engineering, SOC, and agency staff as needed to meet goals
• Perform other duties as needed

What You’ll Need

Required:

• 2+ years of experience with security monitoring and incident response
• 2+ years of experience with MITRE ATT&CK framework
• 2+ years of experience with dashboard creation and reporting
• Associate’s degree in an information technology or information security related field
• 4  years of relevant work experience may be substituted in lieu of education
• 2 years of experience supporting large SOC operations
• Candidate is local to Columbia, SC or a surrounding city in South Carolina

Preferred:

• Experience with the Palo Alto Cortex XSIAM/XDR platform
• Knowledge of Linux, network administration, and network design
• Experience in administration of firewalls, VPN technology, Active Directory, and intrusion detection and prevention systems

Physical Demands

• Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards
• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

#LI-NA1

Reasonable accommodation statement

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to [email protected] or (888) 824 – 8111.

EEO Statement

It is the policy of Computer Aid, Inc.(CAI) not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. It is also the policy of CAI to take affirmative action to employ and to advance in employment, all persons regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.

Employees and applicants of CAI will not be subject to harassment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. Additionally, retaliation, including intimidation, threats, or coercion, because an employee or applicant has objected to discrimination, engaged or may engage in filing a complaint, assisted in a review, investigation, or hearing or have otherwise sought to obtain their legal rights under any Federal, State, or local EEO law is prohibited.

The pay range for this position is listed above. Exact compensation may vary based on several factors, including location, experience, and education. Benefit packages include medical, dental, and vision insurance, as well as 401k retirement account access. Employees in this role may also be entitled to paid sick leave and/or other paid time off as provided by applicable law.