Associate Director, Information Security Engineer

Lever, Inc.; New York (NY); On-site; USD 125,000 - 130,000; Full time

Job summary

Planned Parenthood Federation of America in New York is seeking an Associate Director, Information Security Engineer to lead security monitoring, incident response, and SIEM management within the Information Security division.

You will work with PPFA and Affiliates to configure Splunk, develop SOPs, coordinate with MSSP/MSP, and drive risk-based security improvements across the organization.

Qualifications

• Bachelor’s degree and 5+ years of industry experience.
• Experience with PCI, HIPAA, ISO 27001, NIST, CSF, and related standards.
• Proficient in UNIX/AIX/Solaris, Linux and Windows Server OS.
• Experience with SIEM (Splunk) and incident response.
• Ability to develop SOPs and security process improvements.
• Ability to work 24x7 in security operations and with MSSPs/MSPs.

Responsibilities

• Manage 24x7 security monitoring and threat analysis.
• Configure and manage Splunk SIEM and related tools.
• Investigate and triage security events and assign resolutions.
• Develop and maintain SOPs for the Information Security Ops group.
• Assist in vulnerability assessments and remediation with IT Ops.
• Assist in IR incidents as assigned.
• Collaborate with PPFA and Affiliates' security teams.

Skills

Security engineering

SIEM

Threat analysis

Vulnerability assessments

IR incident response

Network security

Compliance awareness

Forensic investigations

Unix/Linux

Team collaboration

Education

Bachelor’s degree in Information Security or related field

Tools

Splunk

Job description

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. Planned Parenthood organizations serve all people with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions. We do all this because we care passionately about helping people lead healthier lives.

Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the independently incorporated Planned Parenthood affiliates, which operate non-profit health centers across the U.S. PPFA also works to educate the public on and advocate for issues of sexual and reproductive health. Formed as the advocacy and political arm of Planned Parenthood Federation of America, Planned Parenthood Action Fund is a separate non-profit membership organization tax-exempt under section 501(c)(4). The Action Fund engages in educational, advocacy, and limited electoral activity, including grassroots organizing, legislative advocacy, and voter education in furtherance of the Planned Parenthood mission. Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seek a dynamic and effective Associate Director, Information Security Engineer. This job reports directly to the Dir, Security Operations in the Information Security division of PPFA. The Office of Information Security provides the strategy and implementation of the information security program that safeguards the data entrusted to Planned Parenthood by its patients, supporters, donors, and staff.

Purpose

The Security Engineer manages Information Technology security protections with the goal of protecting PPFA from and reducing the impact of security incidents and system compromises for the organization. This position provides security monitoring, event investigation and analysis, and countermeasure proposals on a 24x7 basis along with providing support and guidance to Tier I Analysts, will provide technical assistance for Tier II & III incidents as assigned, and is responsible to directly interface with the InfoSec Operations Team, Managed Security Service Provider (MSSP) and IT Managed Service Provider (MSP) as it relates to security event architecture, collection, management, reporting, and alerting within PPFA’s SIEM Platforms.

Engagement

The Security Engineer will engage with InfoSecOps, InfoSec, ITOps/MSP, the MSSP, ATS and staff within both PPFA and Affiliates.

Delivery

The Security Engineer will deliver by identifying, implementing, and maintaining Information Security toolsets, primarily focused on SIEM, to protect the organization; interfacing with IT Ops to ensure proper security event logging setup; and, where applicable, supporting the Information Security SIEM management needs of PPFA and Affiliates.

Act as a Subject Matter Expert for PPFA’s SIEM (currently Splunk) and be able to configure, manage, operate, and administer the platform from a managed SIEM perspective.

• SIEM Security Monitoring – Provide security monitoring and threat/risk analysis in a 24/7 environment.
• SIEM Event Filtering – Monitor & ensure established processes for event identification are followed, and, where required, make recommendations for new or refined event filtering, ensuring all updates are completed.
• SIEM Event Investigation & Assignment – Monitor & ensure established processes are followed for collecting relevant data and performing the necessary levels of analysis on that data. Ensure events are assigned appropriately.
• Tier II Event Escalations - Follow an established process for handling Tier II escalations, identifying the source of the escalation (MSSP, MSP, Affiliate, or other) and the appropriate triage and documentation processes.
• Creating and maintaining Standard Operating Procedures (SOPs) for the Information Security Ops group, and providing recommendations on security process improvements
• Support and engage on complex security tool-specific tasks with the assistance and guidance of management, vendor & MSSP resources
• Assist in Vulnerability Assessments setup, scanning, analysis, and remediations, working with IT Ops staff and corporate vendors as needed in correcting errors and alerts as found with the IT infrastructure systems.
• Assist in IR incidents as assigned by management
• All other duties as assigned

Knowledge, Skills and Abilities (KSAs)

• Bachelor’s degree and 5+ years of industry experience
• Passion for working on newer technologies and exploring the security domain.
• Independent decision-making capabilities, especially in identifying analysis tracks for escalated events, analysis assignments, and escalation decisions ranging from a base Tier I event to Incident Response-level remediations.
• Experience in compliance requirements and industry standards like PCI, HIPAA, ISO 27001, NIST, CSF, MITRE ATT&CK, ITIL, COBIT, Sarbanes-Oxley, and SANS 20.
• UNIX, AIX & Solaris, Linux, Windows Server Operating Systems
• Network/System Intrusion Detection or Prevention Systems (IDS/IPS)
• Security Information and Event Management (SIEM)
• Vulnerability scanner/Penetration testing systems
• Wireless Networking
• Switches/Routers, Firewalls (basic configuration)
• TCP/IP networking, VPN, VLAN, NAT, and security concepts
• Software & Hardware Asset Management
• Security threat and attack countermeasures
• Experience conducting forensic analytical studies and investigations
• Flexibility and ability to adapt to quickly changing priorities and ambiguous situations
• A deep commitment to Planned Parenthood’s mission of promoting Sexual and Reproductive Health

$125,000 - $130,000 a year

Travel:(0-10% travel as needed)

Planned Parenthood's cultural ethos, "In This Together", reflects our commitment to building a workplace culture that fosters belonging, promotes learning throughout the employee lifecycle, and recognizes individual contributions to our mission.

Planned Parenthood Federation of America is an equal employment opportunity employer and is committed to maintaining a non-discriminatory work environment, and does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, national origin, age, disability, veteran status, marital status, sexual orientation, gender identity, or any other characteristic protected by applicable law. Planned Parenthood is committed to creating a dynamic work environment that values diversity and inclusion, respect and integrity, customer focus, and innovation.