Security Analyst (Project Lead)

Job Title: Tier 2 SOC Analyst / Security Analyst – Project Lead

Location: Columbia, SC (hybrid, with possibility for remote). Must work Eastern Time (EST) business hours.

Job Type

Full-time, W2 Contract (12 months, with possible extension) Pay: $46.00 per hour

About Concordant Concordant LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA HUBZone-certified firm headquartered in Laramie, Wyoming. We provide professional, IT, and cybersecurity services to federal and state government clients.

About the Role

Concordant seeks a Tier 2 SOC Analyst to support a state government cybersecurity program. This new role supports statewide security monitoring, threat detection, incident response, and security investigations. You will also work directly with state agencies to promote and expand their use of centralized security services.

The role follows a hybrid schedule in Columbia, SC, and we will consider fully remote candidates who can come on-site as needed.

What You Will Do

• Review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents
• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents to Tier 3 with detailed context
• Write incident reports, timelines, and post-incident summaries, and contribute to lessons-learned documentation and remediation recommendations
• Investigate user-reported phishing, malware infections, and potential policy violations, and advise users and teams on containment and recovery
• Recommend updates to SOC playbooks and workflows, and tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
• Partner with engineering teams to configure and tune monitoring tools, integrate new threat intelligence feeds, and proactively hunt for threats using current TTPs
• Serve as a customer-facing subject matter expert who demonstrates the value of centralized security services and resolves agency issues
• Document processes, runbooks, and troubleshooting steps for SOC operations
• Coordinate with engineering, SOC, and agency staff to meet program goals

Required Qualifications

• 2+ years of experience in security monitoring and incident response
• 2+ years of experience with the MITRE ATT&CK framework
• 2+ years of experience creating dashboards and reports
• 2+ years of experience supporting large SOC operations
• Associate’s degree in information technology, information security, or a related field (4 years of relevant work experience may substitute for the degree)
• Ability to work Eastern Time business hours
• Ability to pass drug, driving record, credit, criminal, E-Verify, and SLED background checks

Preferred Qualifications

• Experience with Palo Alto Cortex XSIAM/XDR
• Knowledge of Linux, network administration, and network design
• Experience administering firewalls, VPN technology, Active Directory, and IDS/IPS
• CISSP, CISA, or an equivalent advanced security certification
• Additional certifications such as CEH, OSCP, GPEN, or vendor security certifications
• Residence in or near Columbia, SC

Interview Process

First-round interviews take place on Microsoft Teams with cameras on. Finalists may complete an in-person interview before selection.

Why Concordant

• Veteran-owned company with a strong commitment to service members, veterans, and military families
• Flexible hybrid schedule with a remote option
• Direct support of a statewide cybersecurity mission
• Competitive hourly pay

Concordant LLC is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by law. We encourage veterans, Guard and Reserve members, and military spouses to apply.

Pay: Up to $46.00 per hour

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Employee discount
• Health insurance
• Health savings account
• Paid time off
• Retirement plan
• Vision insurance

Application Question(s):

• Will you now or in the future require sponsorship for employment?
• What is your current physical mailing address? (SBA HUBZone check)
• Do you have any relevant certifications?

Education:

• Associate (Preferred)

Experience:

• security monitoring and incident response: 2 years (Required)
• MITRE ATT&CK framework: 2 years (Required)
• dashboard creation/reporting: 2 years (Required)
• supporting SOC ops: 2 years (Required)
• Palo Alto Cortex XSIAM/XDR: 1 year (Preferred)
• Linux, network admin, network design: 1 year (Preferred)
• Firewall, VPN, Active Directory, or IDS/IPS admin: 1 year (Preferred)

Ability to Commute:

• Columbia, SC 29201 (Required)

Work Location: Hybrid remote in Columbia, SC 29201