Associate Director, Information Security Engineer
Manager
Analytics
Cyber Security
Cybersecurity Tools
Data Platform
Data Processing
Data Security
Facilities Management
Ids/ips
Incident Response
Information Security
Information Technology (IT)
InfoSec
Log Management
Management
Network Security
Offensive Security
Project Management
Risk Management
Security
Security Compliance
Security Engineering
Security Information And Event Management
Security Monitoring
Security Operations
Security Standards
Security Testing
Splunk
Splunk Siem
Wireless Security
Job Description
Lead and run high-availability IT security operations to help protect PPFA from incidents and system compromises.
Responsibilities
- Manage Information Technology security protections to reduce the likelihood and impact of security incidents and system compromises.
- Deliver 24x7 security monitoring with event investigation and analysis.
- Develop and propose security countermeasures based on investigation findings.
- Provide support and guidance to Tier I Analysts.
- Provide technical assistance for Tier II and Tier III incidents as assigned.
- Interface with the InfoSec Operations Team, MSSP, and IT MSP on security event architecture, collection, management, reporting, and alerting within PPFA SIEM platforms.
- Coordinate with InfoSecOps, InfoSec, ITOps/MSP, MSSP, ATS, and staff across PPFA and Affiliates on security operations needs.
- Identify, implement, and maintain information security toolsets, primarily SIEM-focused.
- Work with IT Ops to ensure correct security event logging setup.
- Support SIEM management needs for PPFA and Affiliates, where applicable.
- Serve as a Subject Matter Expert for PPFA’s SIEM platform (currently Splunk), including configuration, management, operations, and managed SIEM administration.
- Conduct 24/7 monitoring and provide threat and risk analysis.
- Ensure established processes for event identification are followed; recommend and implement event filtering updates as needed, ensuring changes are completed.
- Ensure processes for data collection and analysis levels are followed; confirm events are assigned appropriately.
- Follow the established process for Tier II escalations, including identifying escalation sources (MSSP, MSP, Affiliate, or other) and handling triage and documentation.
- Create and maintain Standard Operating Procedures (SOPs) for the Information Security Ops group and recommend security process improvements.
- Support complex, tool-specific security tasks with guidance from management, vendor resources, and the MSSP.
- Assist in vulnerability assessments: setup, scanning, analysis, and remediations with IT Ops and corporate vendors as needed.
- Assist in incident response (IR) incidents as assigned by management.
- Perform all other duties as assigned.
Requirements
- Bachelor’s degree and 5+ years of industry experience.
- Ability to make independent decisions, including identifying analysis tracks for escalated events, assigning analyses, and determining escalation actions from Tier I through Incident Response-level remediations.
- Experience with compliance requirements and industry standards including PCI, HIPAA, ISO 27001, NIST, CSF, MITRE ATT&CK, ITIL, COBIT, Sarbanes-Oxley, and SANS 20.
- Working knowledge of UNIX, AIX & Solaris, Linux, and Windows Server operating systems.
- Experience with IDS/IPS (Network/System Intrusion Detection or Prevention Systems).
- SIEM experience.
- Experience with vulnerability scanning and penetration testing systems.
- Wireless networking experience.
- Experience with switches/routers and basic firewall configuration.
- TCP/IP networking and security concepts, including VPN, VLAN, and NAT.
- Security-related software and hardware asset management.
- Ability to develop and apply security threat and attack countermeasures.
- Experience conducting forensic analytical studies and investigations.
- Flexibility to adapt quickly to changing priorities and ambiguous situations.
- Strong commitment to Planned Parenthood’s mission of promoting Sexual and Reproductive Health.
- Passion for working on newer technologies and exploring the security domain.
Skills / Technologies
- Splunk, SIEM
- UNIX, AIX, Solaris, Linux, Windows Server
- IDS/IPS
- Vulnerability scanner, Penetration testing systems
- Wireless Networking
- Switches/Routers, Firewalls (basic configuration)
- TCP/IP, VPN, VLAN, NAT
- PCI, HIPAA, ISO 27001, NIST, CSF, MITRE ATT&CK, ITIL, COBIT, Sarbanes-Oxley, SANS 20
Travel
- 0-10% travel as needed.
Compensation
- $125,000 - $130,000 per year.
Location: New York, NY (onsite)
Similar Jobs
