The SouthState story is one of steady growth, deep community roots, and an unwavering commitment to helping our customers move forward. Since our beginnings in the 1930s to becoming a trusted financial partner across the South and beyond - we are known for combining personal relationships with forward-thinking solutions.
We are committed to helping our team members find their success while maintaining the integrity of our values: building trust, fostering lasting relationships and pursuing excellence. At SouthState, individual contributions are recognized, potential is cultivated and team members are inspired to achieve their greater purpose. Your future begins here!
Summary
The Security Posture Analyst I supports the Cyber Threat Exposure Management program by monitoring, analyzing, and reporting on the security posture of the Company's on-premises, cloud, SaaS, and security technology environments. This role helps provide visibility into control effectiveness, exposure trends, configuration drift, and emerging risks through actionable metrics, dashboards, and reporting. The position enables informed risk-based decision making by ensuring security posture data is accurate, measurable, and effectively communicated to stakeholders.
Duties & Responsibilities
- Enterprise Security Posture Monitoring - Monitor and assess the security posture of on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments to identify exposure, control weaknesses, configuration drift, and emerging security risks.
- Security Metrics, KRIs & Executive Reporting - Develop, maintain, and publish security posture scorecards, dashboards, KPIs, KRIs, trend analysis, and management reporting that measure exposure, control effectiveness, remediation performance, asset coverage, and alignment to established risk tolerances.
- Exposure Analysis & Risk Prioritization - Analyze vulnerabilities, misconfigurations, exposed assets, and control deficiencies to identify material exposures and support risk-based remediation prioritization using threat intelligence, exploitability, business criticality, and potential business impact.
- Posture Data Management & Analytics - Correlate, validate, normalize, and analyze information across security, cloud, SaaS, vulnerability management, asset management, and threat intelligence platforms to ensure accurate risk representation and identify systemic weaknesses, coverage gaps, and emerging trends.
- Remediation Oversight & Risk Governance Support - Monitor remediation activities, validate corrective actions, track exposure reduction efforts, support escalation processes, and provide posture visibility that promotes accountability for risk reduction and compliance with security standards and service level objectives
- Compliance, Assessments & Program Maturity - Support regulatory, audit, risk management, and internal assessment activities through posture reporting and evidence collection while identifying opportunities to improve visibility, automation, measurement capabilities, and overall Threat Exposure Management program effectiveness.
- It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Qualifications
Education Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Analytics, or a related field preferred.
- Equivalent education, military experience, certifications, or relevant work experience may be considered.
Minimum Experience
- 2-4 years of experience in cybersecurity, information technology, risk management, technical analysis, security operations, or a related field.
- Experience gained through internships, co-op programs, military service, help desk support, systems administration, security operations, or similar technical roles is preferred.
- Exposure to vulnerability management, cloud security, security monitoring, identity security, endpoint security, attack surface management, or security reporting platforms is beneficial.
Licenses & Certifications
- No certification required.
- Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, Microsoft AZ-900, or equivalent entry-level cybersecurity or cloud certifications.
Knowledge, Skills, & Abilities
- Working knowledge of cybersecurity principles, security controls, vulnerability management, attack surface management, secure configuration practices, and risk-based security decision making.
- Foundational understanding of on-premises infrastructure, cloud computing platforms, SaaS technologies, networking, identity and access management, endpoint security, and enterprise technology environments.
- Ability to interpret, analyze, and correlate security data from multiple sources to identify trends, control deficiencies, emerging risks, and opportunities for security posture improvement.
- Knowledge of security posture management concepts, including Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), Exposure Management, External Attack Surface Management (EASM), and security metrics and reporting.
- Ability to develop, maintain, and communicate meaningful security dashboards, scorecards, KPIs, KRIs, and trend reporting for both technical and non-technical stakeholders.
- Strong analytical and problem-solving skills with the ability to evaluate large data sets, identify patterns, validate findings, and support risk-based prioritization.
- Strong attention to detail and commitment to data quality, accuracy, consistency, and documentation.
- Effective written, verbal, and presentation skills with the ability to communicate technical concepts in a clear and concise manner.
- Ability to work independently while collaborating effectively with cross-functional teams including Security Operations, Vulnerability Management, Cloud Security, Security Architecture, Cyber Engineering, Risk Management, Audit, and Technology teams.
- Working knowledge of cybersecurity frameworks, standards, and regulatory requirements such as NIST, CIS Controls, PCI DSS, FFIEC, and related information security governance practices.
- Proficiency in Microsoft Office applications, particularly Excel, PowerPoint, and data analysis or reporting platforms used to support security metrics and management reporting.
- Strong organizational, prioritization, and time-management skills with the ability to manage multiple assignments and recurring reporting deadlines.
- Demonstrated curiosity, initiative, continuous learning mindset, and commitment to professional development within cybersecurity and Threat Exposure Management disciplines.
- Ability to identify, communicate, and escalate material risks, control gaps, and posture degradations through established governance and management processes.
Physical Demands and Work Environment
Physical Demands
- Ability to communicate in person, on the phone, and through electronic channels
- Ability to use a computer on a frequent basis, including typing and sustained attention to a monitor
- Ability to sit, walk, and/or stand for extended periods of time
- Ability to bend and reach
Work Environment
- Office: If the position reports to a physical Company location, the setting will be a typical office environment.
- Remote or hybrid: For remote or hybrid positions, a secure and distraction-free setting is required, with a reliable internet connection (cable or fiber preferred, mobile hotspots not acceptable). Hybrid positions will report to a physical Company location, as directed by the manager, and that setting will be a typical office environment.
Equal Opportunity Employer, including disabled/veterans.
Bachelor's degree in cybersecurity or related field preferred; 2-4 years experience in cybersecurity or IT; knowledge of security posture management, vulnerability management, and reporting; proficiency in Microsoft Office; ability to work remotely with reliable internet.
Key Responsibilities
- monitoring security posture
- developing security metrics
- analyzing vulnerabilities
Skills & Tools
Microsoft Excel, Microsoft PowerPoint, Microsoft Office
Job Details
- Category: Information Technology
- Seniority: Entry Level
- Commitment: Full Time
- Workplace: Remote — Virginia or North Carolina or South Carolina or Georgia or Florida or Alabama or Texas or Colorado
- Salary: USD 87,282 – 139,425 / year
- Languages: English
About SouthState Bank
A financial partner combining personal relationships with forward-thinking solutions. — Industry: Finance