Associate Director, Information Security Engineer

Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seek a dynamic and effective Associate Director, Information Security Engineer. This job reports directly to the National Director, Information Security in the Information Security division of PPFA. The Office of Information Security provides the strategy and implementation of the information security program that safeguards the data entrusted to Planned Parenthood by its patients, supporters, donors, and staff. Purpose: The Security Engineer manages Information Technology security protections with the goal of protecting PPFA from and reducing the impact of security incidents and system compromises for the organization.

Responsibilities

Provide security monitoring, event investigation and analysis, and countermeasure proposals on a 24x7 basis; Support and guide Tier I Analysts; Provide technical assistance for Tier II & III incidents as assigned; Interface directly with the InfoSec Operations Team, Managed Security Service Provider (MSSP) and IT Managed Service Provider (MSP) regarding security event architecture, collection, management, reporting, and alerting within PPFA's SIEM Platforms; Identify, implement, and maintain Information Security toolsets, primarily focused on SIEM; Interface with IT Ops to ensure proper security event logging setup; Act as Subject Matter Expert for PPFA's SIEM (currently Splunk); Monitor and ensure established event filtering processes are followed and recommend new or refined event filtering; Monitor and ensure event investigation and assignment processes are followed; Follow an established process for Tier II escalations; Create and maintain Standard Operating Procedures (SOPs) for the Information Security Ops group; Support complex security tool-specific tasks; Assist in Vulnerability Assessments setup, scanning, analysis, and remediation; Assist in IR incidents as assigned by management; All other duties as assigned; Travel 0-10% as needed

Requirements

Bachelor's degree and 5+ years of industry experience; Passion for working on newer technologies and exploring the security domain; Independent decision-making capabilities, especially in identifying analysis tracks for escalated events, analysis assignments, and escalation decisions ranging from a base Tier I event to Incident Response-level remediations; Experience in compliance requirements and industry standards like PCI, HIPAA, ISO 27001, NIST, CSF, MITRE ATT&CK, ITIL, COBIT, Sarbanes-Oxley, and SANS 20; UNIX, AIX & Solaris, Linux, Windows Server Operating Systems; Network/System Intrusion Detection or Prevention Systems (IDS/IPS); Security Information and Event Management (SIEM); Vulnerability scanner/Penetration testing systems; Wireless Networking; Switches/Routers, Firewalls (basic configuration); TCP/IP networking, VPN, VLAN, NAT, and security concepts; Software & Hardware Asset Management; Security threat and attack countermeasures; Experience conducting forensic analytical studies and investigations; Flexibility and ability to adapt to quickly changing priorities and ambiguous situations; A deep commitment to Planned Parenthood's mission of promoting Sexual and Reproductive Health