The Lead Information Security Engineer supports the InfoSec mission of securing the patient experience. This position oversees and manages engineering of information security applications and systems to ensure compliance with Children's National Hospital IT standards. Responsibilities for this role include design, deployment, and optimization of data pipelines feeding into Splunk and other logging and analysis platforms. This includes onboarding new data sources, parsing logs, maintaining data integrity, documentation, and optimizing infrastructure to handle enterprise-scale data volumes while ensuring alignment with security compliance requirements

Essential Functions:

• Integrate platforms with SIEM and SOAR for enrichment, correlation, and case workflow. Maintain posture metrics and report them to partner teams, Security leadership, and the CISO on a defined cadence.
• Own operational reliability, configuration, upgrades, integration health, and change governance for assigned applications and systems, with documented runbook
• Serve as a technical Lead for vendor communication and tasks related to data ingestion. Manage support escalations and track case resolution.
• Partner with internal teams to determine security platfrom needs, translating their requirements into sustainable technical capability.
• Manage and optimize resources for highest capable performance and security based on CNH compliance requirements.
• Build dashboards, reports, and other documentation, providing leadership with clear insight into resources and current system state.

• Leads efforts involving the identification of cybersecurity system performance

• Oversees the operation, monitoring, and analysis of cybersecurity applications and systems

• Leads the testing and deployment of cybersecurity systems including firewalls, network analysis tools, access management systems, and vulnerability management applications

• Leads response actions necessary to recover from system failures

• Leads the curation of key reporting metrics associated with cybersecurity systems.

• Anticipate and responds to customer needs; follows up until needs are met

• Demonstrate collaborative and respectful behavior

• Partner with all team members to achieve goals

• Receptive to others’ ideas and opinions

• Contribute to a positive work environment

• Demonstrate flexibility and willingness to change

• Identify opportunities to improve clinical and administrative processes

• Make appropriate decisions, using sound judgment

• Use resources efficiently

• Search for less costly ways of doing things

• Speak up when team members appear to exhibit unsafe behavior or performance

• Continuously validate and verify information needed for decision making or documentation

• Stop in the face of uncertainty and takes time to resolve the situation

• Demonstrate accurate, clear and timely verbal and written communication

• Actively promote safety for patients, families, visitors and co-workers

• Attend carefully to important details - practicing Stop, Think, Act and Review in order to self-check behavior and performance