Associate Director, Information Security Engineer
About The Position
Planned Parenthood Federation of America (PPFA) is seeking a dynamic and effective Associate Director, Information Security Engineer. This role reports directly to the Dir, Security Operations within the Information Security division. The Office of Information Security is responsible for the strategy and implementation of the information security program, safeguarding the data entrusted to Planned Parenthood by its patients, supporters, donors, and staff. The Security Engineer will manage Information Technology security protections to safeguard PPFA from security incidents and system compromises, reducing their impact. This position involves 24x7 security monitoring, event investigation and analysis, and proposing countermeasures. It also provides support and guidance to Tier I Analysts, technical assistance for Tier II & III incidents, and direct interface with the InfoSec Operations Team, Managed Security Service Provider (MSSP), and IT Managed Service Provider (MSP) regarding security event architecture, collection, management, reporting, and alerting within PPFA’s SIEM Platforms. The Security Engineer will engage with InfoSecOps, InfoSec, ITOps/MSP, the MSSP, ATS, and staff within both PPFA and Affiliates. The role involves identifying, implementing, and maintaining Information Security toolsets, primarily focused on SIEM, to protect the organization; interfacing with IT Ops to ensure proper security event logging setup; and supporting the Information Security SIEM management needs of PPFA and Affiliates.
Requirements
- Bachelor’s degree and 5+ years of industry experience
- Passion for working on newer technologies and exploring the security domain.
- Independent decision-making capabilities, especially in identifying analysis tracks for escalated events, analysis assignments, and escalation decisions ranging from a base Tier I event to Incident Response-level remediations.
- Experience in compliance requirements and industry standards like PCI, HIPAA, ISO 27001, NIST, CSF, MITRE ATT&CK, ITIL, COBIT, Sarbanes-Oxley, and SANS 20.
- UNIX, AIX & Solaris, Linux, Windows Server Operating Systems
- Network/System Intrusion Detection or Prevention Systems (IDS/IPS)
- Security Information and Event Management (SIEM)
- Vulnerability scanner/Penetration testing systems
- Wireless Networking
- Switches/Routers, Firewalls (basic configuration)
- TCP/IP networking, VPN, VLAN, NAT, and security concepts
- Software & Hardware Asset Management
- Security threat and attack countermeasures
- Experience conducting forensic analytical studies and investigations
- Flexibility and ability to adapt to quickly changing priorities and ambiguous situations
- A deep commitment to Planned Parenthood’s mission of promoting Sexual and Reproductive Health
Responsibilities
- Act as a Subject Matter Expert for PPFA’s SIEM (currently Splunk) and be able to configure, manage, operate, and administer the platform from a managed SIEM perspective.
- Provide security monitoring and threat/risk analysis in a 24/7 environment.
- Monitor & ensure established processes for event identification are followed, and, where required, make recommendations for new or refined event filtering, ensuring all updates are completed.
- Monitor & ensure established processes are followed for collecting relevant data and performing the necessary levels of analysis on that data. Ensure events are assigned appropriately.
- Follow an established process for handling Tier II escalations, identifying the source of the escalation (MSSP, MSP, Affiliate, or other) and the appropriate triage and documentation processes.
- Creating and maintaining Standard Operating Procedures (SOPs) for the Information Security Ops group, and providing recommendations on security process improvements.
- Support and engage on complex security tool-specific tasks with the assistance and guidance of management, vendor & MSSP resources.
- Assist in Vulnerability Assessments setup, scanning, analysis, and remediations, working with IT Ops staff and corporate vendors as needed in correcting errors and alerts as found with the IT infrastructure systems.
- Assist in IR incidents as assigned by management.
- All other duties as assigned.
Benefits
- E-Verify program participation
- Equal employment opportunity employer
- Commitment to maintaining a non-discriminatory work environment
- Commitment to creating a dynamic work environment that values diversity and inclusion, respect and integrity, customer focus, and innovation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
