Senior Information Security Analyst

Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund (PPAF) seek a dynamic and effective Senior Information Security Analyst. This job reports to the Director, Incident Response Threat & Vulnerability Management in the Information Security Program of PPFA. This role is responsible for supporting the Director of IR & Threat Vulnerability in building and maintaining the enterprise-wide Vulnerability, Incident Response and Cyber Threat Management programs. The Senior Information Security Analyst performs all phases of the incident response life cycle: preparation, analysis, containment, eradication, remediation, recovery and post-incident activity for all incidents in support of the National Office and the Federation. Completes threat hunting in both on-premise and cloud environments. The Senior Information Security Analyst will help manage the MSSP partner for alert monitoring and will be tasked with responding, if necessary, to events/incidents on a 24x7 basis.

Responsibilities

Respond to security incidents and investigations, acting as technical lead for all phases of Incident Response; Analyze existing Incident Response (IR) processes and provide actionable technical recommendations to the immediate IR team; Maintain and update procedures, guidelines, and playbooks to streamline security incidents under the guidance of IR leadership; Maintain thorough documentation of cyber threats, threat vectors, threat actors, and threat trends for threat modeling activities and security incidents; Assist in developing policies, procedures, and playbooks for cybersecurity, intelligence, and data protection; Mature and continuously benchmark the PPFA incident response playbook, liaising with vendor partners, Affiliate IT Leadership, and closely partnering with PPFA business functions; Monitor alerting and reporting mechanisms performed by MSSP as well as internal capabilities to potential cyber threats; Collect, analyze, and maintain metrics and threat intelligence briefs that illustrate the impact of the current threat landscape; Coordinate with external forensics retainer to ensure confidential and in-depth investigations promptly, disseminating and maintaining reports on a highly confidential basis; Maintain current understanding of malicious adversaries, threat groups, and campaigns, indicators of compromise (IOCs), and highly granular tools; Develop work plans for IR and Threat Intelligence, as delegated by the Director, and complete initiatives within and across teams to ensure timely delivery; Support the InfoSec Operations team with vulnerability scans, penetration tests, and logging and event management results; Work with the team on recommendations and findings, both in written reports and in presentation format; Collaborate with key stakeholders at the National Office and the Affiliates on key findings and root cause analysis improvements; Support executive leader communications on potential emergent threats and ongoing efforts to resolve active cybersecurity incidents; Partner with stakeholders to enhance incident readiness through exercises and drills; Collaborate with strategic vendor partners and external security research communities to produce high-quality threat intelligence; Work across department lines in developing product vulnerability remediation and incident response; Partner with architectural teams to conduct proof-of-concept evaluations for emerging technologies for security stack and production environment

Requirements

Bachelor's degree in Information Technology, Cybersecurity or equivalent experience; 5+ years of work experience in Cybersecurity, threat detection, incident response, and vulnerability management in an Information Security Operations capacity or in a related field; Experience coordinating security incident meetings, dividing responsibilities, and influencing key stakeholders to resolve security incidents; Experience and strong understanding of multiple forms of Indicators of Compromise (IoCs) and corresponding capabilities to detect, alert on them, and share information across key stakeholders; Experience with Security frameworks such as NIST CSF and MITRE ATT&CK; Experience with Annual Threat Assessment and Control Gap Analysis; Experience with building and reporting on Key Performance Indicators (KPI), Key Risk Indicators (KRI) and establishing thresholds with corrective actions; Knowledge of the external security community's culture and mindset; Ability to recognize and respond to problems with potential solutions in a highly professional, confidential and sensitive manner; Familiarity with Cloud and Hybrid architectures; Strong interpersonal skills; Excellent analytical skills with sharp attention to detail and the ability to meet critical deadlines; Self-directed and can work alone or in a team; Ability to work collaboratively and flexibly with a dynamic, fast-moving team; Strong organizational, analytical, and problem-solving skills; Strong oral and written communication skills; Experience in managing or leveraging a variety of security appliances, such as SIEM, EDR, Email gateways, etc.; Flexibility and ability to adapt to quickly changing priorities and ambiguous situations; A deep commitment to Planned Parenthood's mission of promoting Sexual and Reproductive Health; Participate in a 24/7 on-call rotation to monitor, detect, and respond to urgent security alerts and potential cyber incidents

Nice to have

Information Security certifications preferred; Industry certifications such as CISSP, GCIH, or CySA highly preferred; Experience with Annual Threat Assessment and Control Gap Analysis; Knowledge of the external security community's culture and mindset; Familiarity with Cloud and Hybrid architectures; Experience in managing or leveraging a variety of security appliances, such as SIEM, EDR, Email gateways, etc.