Security (SOC) Analyst

The Security (SOC) Analyst will be a valued member of the EAB Information Security team. We work to keep our partners and EAB colleagues safe from cyber-attacks and prevent the theft of data and intellectual property. We think big and strategic but aren’t afraid to get into the weeds. We’re builders and breakers. We believe that diversity makes for better, more creative solutions to tough problems. We’re easy to work with and eager to help. Most importantly, we work every day to contribute to the mission of making education smarter and our communities stronger. If this sounds like you, we’d love to talk. The Security (SOC) Analyst will work within the Company’s Information Security Group and be responsible for performing tasks associated with security operations, detection, and response. The Security (SOC) Analyst analyzes results from intrusion detection systems including utilizing other tools to detect compromises and ensure the integrity of the corporate network. The Security (SOC) Analyst works within the security operations team and works across the firm with diverse teams (technical and non-technical) to strengthen observability controls and respond to security events. The Security (SOC) Analyst builds partnerships and relationships across the company to advance strategic initiatives, improve security outcomes, and contribute positively to EAB’s security culture. This opportunitymay be based in Washington, DC or Richmond, VA. This position is also listed as Security Analyst for posting purposes; the official title of this hire is expected to be Security Analyst to align with EAB business norms. This opening is not eligible for visa sponsorship at this time; EAB will thus consider candidates who possess U.S. work authorization that does not require employment-based visa sponsorship now or in the future. Primary Responsibilities: Participate in security detection, response, and incident handling Monitor networks and systems for security events, intrusions, and anomalous behaviors with the security operations team: daily review of data from Anti-Viruses/Malware Detection, Firewalls, Intrusion Detection/Prevention Systems, Third Party Reports, Integrated Application Reports, Log Aggregation Platforms, and Web Application Firewalls (WAF) Manage maintenance, hardware and software installation, upgrades, and troubleshooting for security assets in the data center and the cloud Participate in company projects to provide security requirements, visibility requirements, and network design review of cloud deployments (SaaS, PaaS, IaaS) and on-premises integrations Review major network changes to ensure compliance with existing IT policies and reduce the overall risk and number of vulnerabilities present across the network Report vulnerabilities to stakeholders across the company as well as external organizations as necessary and appropriate Effectively communicate and document security incidents to maintain records and formulate recommendations process improvements Proactively assesses potential items of risk and opportunities of vulnerability in the network Establishes strong relationships across the company with product and corporate IT teams, as well as with strategic service providers Basic Qualifications: At least one year of experience as a security engineer, incident responder or enterprise defender Experience with network protocols and architecture Basic knowledge of system internals for at least one major operating system (Windows, Linux, and MacOS) Ability to work in a fast-paced business environment with global, geographically-distributed teams Exceptional interpersonal skills with ability to gain the confidence and respect of technology leaders and senior level executives Familiarity with tools similar but not limited to DarkTrace, Bluecoat Proxy, Symantec Anti-Virus, RSA Archer, and/or Google Cloud. Ideal Qualifications: Strong analytical and troubleshooting skills Experience performing basic administration for security systems and working with third party vendors to resolve software and hardware issues Experience with malware analysis including detection, prevention and eradication Experience with Security Incident Event Management (SIEM) systems, including tuning, building queries, and integrating new data sources Experience working across functions to expand visibility across applications, systems, and networks Experience building out new detection technologies and incorporating internal and external data sources to enhance detection and response capabilities Experience in implementing and supporting automation and infrastructure-as-code for security systems in cloud environments Proven relationship-building skills and ability to work well under pressure and within tight deadlines Strong writing, editing, and documentation skills Willingness to learn new things and take on additional responsibilities (as appropriate) across multiple information security domains Commitment to embracing a continual learning environment and contributing to a dynamic and welcoming culture of fairness, authenticity, and belonging in support of EAB’s mission, values, and aspiration. Compensation: The anticipated starting salary (base) range for this role is $73,500 - $92,500 per year. Actual salary varies due to factors that may include but not be limited to relevant experience, skills, and location. At EAB, it is not typical for an individual to be hired at or near the top of the starting salary range for their role. This hire will additionally be eligible for discretionary bonus or incentive compensation. Variable compensation may depend on various factors, such as individual and organizational performance. Consistent with our belief that our employees are our most valuable resource, EAB offers a competitive and inclusive benefits package. Our benefits currently include: Medical, dental, and vision insurance plans; dependents and domestic partners eligible 20+ days of PTO annually, in addition to paid firm and floating holidays Daytime leave policy for community service and flextime for fitness activities (up to 10 hours per month each) 401(k) retirement savings plan with annual discretionary company matching contribution Health savings account, healthcare and dependent care flexible spending account, and pre-tax commuter plans Employee assistance program with counseling services and resources available to all employees and immediate family Wellness programs including gym discounts, incentives to promote healthy living, and family access to the leading app for sleep, meditation, and relaxation Fertility treatment coverage and adoption or surrogacy assistance Paid parental leave with phase back to work program for birthing and non-birthing parents Access to milk shipping service to support nursing employees during business travel Discounted pet health insurance coverage for dog and cat family members Company-provided life, AD&D, and disability insurance Financial wellness resources and membership in a robust employee discount program Access to employee resource groups, merit-based advancement, and dynamic professional growth opportunities At EAB, we believe that to fulfill our mission to “make education smarter and our communities stronger” we need team members who bring a diversity of perspectives to the table and are committed to fostering a workplace where each team member is valued, respected and heard. To that end, EAB is an Equal Opportunity Employer, and we make employment decisions on the basis of qualifications, merit and business need. We don’t discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. #J-18808-Ljbffr EAB (Education Advisory Board)