Security; SOC Analyst

The Security (SOC) Analyst will be a valued member of the EAB Information Security team. We work to keep our partners and EAB colleagues safe from cyber-attacks and prevent the theft of data and intellectual property. We think big and strategic but aren’t afraid to get into the weeds. We’re builders and breakers. We believe that diversity makes for better, more creative solutions to tough problems.

We’re easy to work with and eager to help. Most importantly, we work every day to contribute to the mission of making education smarter and our communities stronger. If this sounds like you, we’d love to talk.

The Security (SOC) Analyst will work within the Company’s Information Security Group and be responsible for performing tasks associated with security operations, detection, and response. The Security (SOC) Analyst analyzes results from intrusion detection systems including utilizing other tools to detect compromises and ensure the integrity of the corporate network. The Security (SOC) Analyst works within the security operations team and works across the firm with diverse teams (technical and non-technical) to strengthen observability controls and respond to security events.

The Security (SOC) Analyst builds partnerships and relationships across the company to advance strategic initiatives, improve security outcomes, and contribute positively to EAB’s security culture.

This opportunity may be based in Washington, DC or Richmond, VA.

This position is also listed as Security Analyst for posting purposes; the official title of this hire is expected to be Security Analyst to align with EAB business norms.

This opening is not eligible for visa sponsorship at this time; EAB will thus consider candidates who possess U.S. work authorization that does not require employment-based visa sponsorship now or in the future.

• Participate in security detection, response, and incident handling
• Monitor networks and systems for security events, intrusions, and anomalous behaviors with the security operations team: daily review of data from Anti-Viruses/Malware Detection, Firewalls, Intrusion Detection/Prevention Systems, Third Party Reports, Integrated Application Reports, Log Aggregation Platforms, and Web Application Firewalls (WAF)
• Manage maintenance, hardware and software installation, upgrades, and troubleshooting for security assets in the data center and the cloud
• Participate in company projects to provide security requirements, visibility requirements, and network design review of cloud deployments (SaaS, PaaS, IaaS) and on-premises integrations
• Review major network changes to ensure compliance with existing IT policies and reduce the overall risk and number of vulnerabilities present across the network
• Report vulnerabilities to stakeholders across the company as well as external organizations as necessary and appropriate
• Effectively communicate and document security incidents to maintain records and formulate recommendations process improvements
• Proactively assesses potential items of risk and opportunities of vulnerability in the network
• Establishes strong relationships across the company with product and corporate IT teams, as well as with strategic service providers

• At least one year of experience as a security engineer, incident responder or enterprise defender
• Experience with network protocols and architecture
• Basic knowledge of system internals for at least one major operating system (Windows, Linux, and MacOS)
• Ability to work in a fast-paced business environment with global, geographically-distributed teams
• Exceptional interpersonal skills with ability to gain the confidence and respect of technology leaders and senior level executives
• Familiarity with tools similar but not limited to Dark Trace, Bluecoat Proxy, Symantec Anti-Virus, RSA Archer, and/or Google Cloud.

• Strong analytical and troubleshooting skills
• Experience performing basic administration for security systems and working with third party vendors to resolve software and hardware issues
• Experience with malware analysis including detection, prevention and eradication
• Experience with Security…