Onsite/Local Security Analyst
The Onsite Security Analyst role involves monitoring and analyzing security threats, conducting threat hunting, and performing incident response using industry frameworks like NIST and MITRE ATT&CK. The position requires hands-on experience with server/network administration, SIEM, endpoint security tools, and scripting for automation, supporting Confidential Client's security posture through detailed analysis, documentation, and collaboration within a mid-size team. This fully onsite role demands weekend and evening shifts and prioritizes candidates with relevant certifications and a strong foundation in cybersecurity concepts.
About Careertakes
👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, Information Technology.
Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.
Key Responsibilities
This is an entry-level security analyst role where the selected candidate will be trained and will support the DMV security team. Core responsibilities include:
- Monitor and research threat intelligence feeds; document findings and share with the team.
- Use OSINT tools to gather data on potential risks and adversaries.
- Conduct proactive threat hunting and help create and refine detection rules (SIEM queries, Defender for Endpoint rules).
- Review and analyze logs from firewalls, endpoints, and servers to identify IOCs; escalate notable findings.
- Assist with incident triage and response using frameworks such as NIST and MITRE ATT&CK; gather and preserve evidence.
- Produce clear incident and after-action reports, and keep documentation current and accessible.
- Support vulnerability management by analyzing reports and prioritizing remediation activities.
- Help develop and deliver security awareness training and run simulations to assess employee readiness.
- Use SCCM, GPO, and PowerShell for patching and endpoint management; create scripts/automation to improve efficiency.
- Support endpoint and network security activities, including policy configuration and alert analysis.
- Perform basic digital forensics tasks and develop familiarity with cloud security controls as needed.
Required Qualifications
- Minimum: High school diploma or equivalent.
- Understanding of core security concepts and basic computer and network principles.
- Willingness to learn and follow established security playbooks and procedures.
- Strong attention to detail and ability to analyze data and identify anomalies.
- Good written and verbal communication skills for reporting and team collaboration.
- Must be a current South Carolina resident — no relocation assistance provided.
- Availability for mandatory weekend evening shifts after training (see Schedule & Location).
- Willingness to sign a nondisclosure agreement (NDA) if selected for interviews.
Preferred Qualifications
- 1+ year experience in server or network administration.
- 1+ year in an IT security-focused role (internship, SOC, helpdesk with security responsibilities).
- Familiarity with SIEM platforms and endpoint protection tools (e.g., Microsoft Defender for Endpoint).
- Experience with PowerShell, Group Policy (GPO), SCCM or endpoint management tools.
- Knowledge of vulnerability management and cloud security fundamentals.
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
- Certifications prioritized but not required: GSEC, CompTIA Security+, CompTIA Network+, GCIH.
Schedule & Location
- Work location: Fully onsite in Blythewood, SC. No hybrid or remote flexibility.
- Candidate requirement: Must be a CURRENT South Carolina resident.
- Duration: 12-month contract.
- Typical shifts: Saturday and Sunday evening coverage expected (likely 8:00 PM–8:00 AM; two 12-hour shifts) plus day shifts Wednesday and Thursday (approx. 8:30 AM–2:45 PM). Availability for weekend evening shifts is mandatory.
- Employment type: Full-time (contract).
Compensation (estimated)
- Estimated annual pay: $90,342 per year (estimated). This is provided by the source listing for candidate reference.
Tools, Technologies & Skills You’ll Use
- SIEM platforms and log analysis tools
- Endpoint security solutions (Defender for Endpoint or similar)
- OSINT tools for threat research
- PowerShell, SCCM, Group Policy for automation and patching
- Basic server and network administration tools and procedures
- Incident response frameworks (NIST, MITRE ATT&CK)
About the Client / Industry
Confidential Client provides information technology solutions and services across multiple business domains. The client focuses on applying technology to improve operations, increase productivity, and secure data for public-sector customers.
Equal Opportunity & Hiring Transparency
Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.
If you have questions about how your data is used, please contact us directly.
Negotiate a higher salary! Check the salary ranges for this job type in your area.
View My Salary Range