you forgot the eeo

Security Analyst – Data Protection & Cybersecurity
Concordant LLC | Hybrid – Columbia, SC

Concordant LLC seeks a Security Analyst to support cybersecurity and data protection operations for a federal client program. This role focuses on DLP, Insider Risk Management, Copilot/AI data security, auditing, vendor security reviews, and device patching. The analyst will triage security alerts, investigate the movement of sensitive information, perform system and vendor audits, document findings, escalate incidents, and partner with technical and business teams to strengthen the organization's data governance posture.

Position Summary

This role supports a cybersecurity and data protection program by protecting sensitive information, monitoring security risks, and strengthening controls around AI, Copilot, DLP, Insider Risk, auditing, and vendor security.

Key Responsibilities

Data Protection & Data Governance

• Monitor and administer Data Loss Prevention (DLP) policies and controls
• Investigate data loss, data exposure, and unauthorized access incidents
• Support Data Security Posture Management (DSPM) initiatives for AI and Copilot
• Review the movement, storage, and sharing of sensitive information
• Support data classification and data handling requirements
• Participate in data governance initiatives alongside data owners and stewards

Security Monitoring & Incident Response

• Triage security alerts from DLP, Insider Risk Management, DSPM, and other security platforms
• Investigate suspicious activity involving sensitive information
• Document findings and maintain investigation records
• Escalate incidents according to established procedures
• Support containment, recovery, and post-incident activities

Insider Risk Management

• Monitor Insider Risk Management alerts and cases
• Analyze user activity associated with potential policy violations
• Conduct investigations while maintaining confidentiality and chain of evidence
• Recommend corrective actions and risk mitigation strategies

Vendor Security Management

• Participate in third-party and vendor security assessments
• Review vendor security documentation, audit reports, and questionnaires
• Identify cybersecurity risks associated with third-party services
• Track remediation efforts and risk acceptance decisions

Security Auditing & Compliance

• Support cybersecurity audits and compliance reviews
• Collect and analyze evidence for regulatory and policy requirements
• Support risk assessments and control validation activities
• Maintain documentation supporting compliance efforts

Collaboration & Reporting

• Partner with technical and non-technical staff to resolve security concerns
• Prepare reports, metrics, and presentations on security risks and trends
• Participate in cybersecurity awareness and training initiatives
• Recommend improvements to security policies, procedures, and controls

Required Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field
• 3-5+ years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis
• 3 years of hands-on experience with data protection technologies, including DLP, insider risk management tools, and data security posture management for AI (DSPM for AI)
• 3 years of experience triaging data-related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents
• 3 years of experience collaborating with technical and non-technical teams to resolve security issues and support continuous improvement in data security posture
• A foundational security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC)

Preferred Qualifications

• Experience with AI-driven security tools, including Cortex or other DSPM platforms designed for AI systems
• Experience fine-tuning DLP policies, refining insider risk alerts, or supporting data governance programs
• Familiarity with Azure security, identity-based access controls, conditional access, and security automation or scripting
• Microsoft SC-100, SC-200, CEH, or Associate-level CISSP certification

Location
This is a hybrid position based in Columbia, SC — 3 days in office, 2 days remote.

About Concordant LLC
Concordant LLC is an SDVOSB and SBA HUBZone-certified federal government contracting firm delivering mission-critical support to federal agencies.

Equal Opportunity Employer
Concordant LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Pay: Up to $75,724.80 per year

Application Question(s):

• Will you now or in the future require sponsorship for employment?
• Do you have any relevant certifications? (Sec+, GSEC, etc)

Education:

• Bachelor's (Required)

Experience:

• enterprise cybersecurity operations: 3 years (Required)
• hands-on data protection technologies: 3 years (Required)
• triaging data related security tools: 3 years (Required)
• collaborating with technical and non technical teams: 3 years (Required)

Ability to Commute:

• Columbia, SC 29201 (Required)

Work Location: Hybrid remote in Columbia, SC 29201