Senior Information Security Analyst

Planned Parenthood Federation of America•New York, NY

21d•$87,000 - $92,000

About The Position

Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund (PPAF) seek a Senior Information Security Analyst for PPFA’s Information Security Program. The role reports to the Director, Incident Response Threat & Vulnerability Management and supports enterprise-wide vulnerability, incident response, and cyber threat management programs that safeguard data entrusted to Planned Parenthood by patients, supporters, donors, and staff. The analyst performs all phases of the incident response lifecycle, from preparation and analysis through containment, eradication, remediation, recovery, and post-incident activity. The role also conducts threat hunting in on-premises and cloud environments; identifies, triages, filters, and documents enterprise vulnerabilities and threats; and works with business partners to resolve security matters. The analyst helps manage the MSSP partner responsible for alert monitoring and participates in a 24/7 on-call rotation when needed. The position monitors, builds, augments, and integrates threat detection and remediation capabilities into security operations, while maintaining current knowledge of security standards, products, and the evolving threat landscape. The role supports InfoSec Operations through vulnerability scans, penetration tests, and review of logging and event management results. It collaborates with National Office and Affiliate stakeholders, business functions, vendors, external forensics partners, and security research communities to improve incident readiness and response, threat intelligence, and vulnerability remediation. The position requires 0–10% travel as needed.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, or equivalent experience.
At least 5 years of experience in cybersecurity, threat detection, incident response, and vulnerability management in an Information Security Operations capacity or related field.
Experience coordinating security incident meetings, assigning responsibilities, and influencing stakeholders to resolve incidents.
Strong understanding of multiple forms of indicators of compromise and the capabilities to detect, alert on, and share information about them.
Experience with security frameworks such as NIST CSF and MITRE ATT&CK.
Experience with annual threat assessments and control gap analysis.
Experience building and reporting KPIs and KRIs and establishing thresholds with corrective actions.
Knowledge of the external security community’s culture and mindset.
Ability to respond to problems with potential solutions in a professional, confidential, and sensitive manner.
Familiarity with cloud and hybrid architectures.
Strong interpersonal skills.
Excellent analytical skills, attention to detail, and ability to meet critical deadlines.
Ability to work independently or as part of a team.
Ability to work collaboratively and flexibly in a dynamic, fast-moving team while completing multiple tasks accurately and confidently.
Strong organizational, analytical, and problem-solving skills.
Strong oral and written communication skills.
Experience managing or leveraging security appliances such as SIEM, EDR, and email gateways.
Flexibility and ability to adapt to changing priorities and ambiguous situations.
Deep commitment to Planned Parenthood’s mission of promoting sexual and reproductive health.
Ability to participate in a 24/7 on-call rotation.

Nice To Haves

Information security certifications are preferred.
Industry certifications such as CISSP, GCIH, or CySA are highly preferred.

Responsibilities

Lead technical response to security incidents and investigations across all phases of incident response.
Analyze incident response processes and provide actionable technical recommendations to the IR team.
Maintain and update procedures, guidelines, and playbooks for security incidents.
Document cyber threats, threat vectors, threat actors, and threat trends for threat modeling and security incidents.
Assist in developing cybersecurity, intelligence, and data protection policies, procedures, and playbooks.
Continuously benchmark and mature the PPFA incident response playbook in coordination with vendors, Affiliate IT leadership, and PPFA business functions.
Monitor MSSP and internal alerting and reporting mechanisms for potential cyber threats.
Collect, analyze, and maintain metrics and threat intelligence briefs concerning the threat landscape.
Coordinate confidential investigations with the external forensics retainer and maintain and disseminate investigation reports confidentially.
Maintain current understanding of malicious adversaries, threat groups and campaigns, indicators of compromise, and associated tools.
Develop and complete IR and Threat Intelligence work plans and initiatives as delegated by the Director.
Support vulnerability scans, penetration tests, and review of logging and event management results for pre-incident indicators and ineffective processes or standards.
Prepare written reports and presentations of recommendations and findings for the Information Security Team and business partners.
Collaborate with National Office and Affiliate stakeholders on findings and root cause analysis improvements.
Support executive communications about emerging threats and active cybersecurity incidents and investigations.
Improve incident readiness through exercises and drills and optimize incident response and threat intelligence capabilities.
Collaborate with vendors and external security research communities and build relationships that produce high-quality threat intelligence.
Work across departments on product vulnerability remediation and incident response.
Partner with architectural teams to conduct proof-of-concept evaluations of emerging security technologies for the security stack and production environment.
Participate in a 24/7 on-call rotation to monitor, detect, and respond to urgent security alerts and potential cyber incidents.
Travel 0–10% as needed.