Lead Cyber Security Engineer

About UsCapital Bank N.A. is headquartered in Maryland and has been serving our communities since 1999. We stand as a publicly traded company (NASDAQ: CBNK) with over $3 billion in assets. We offer commercial and consumer banking services to clients primarily in Maryland, DC, and Northern Virginia, alongside two nation-wide lending brands; Capital Bank Home Loans and OpenSky, a credit card division that offers and services credit cards across all states. Our personalized approach to banking, paired with cutting-edge technology solutions and a comprehensive suite of products and services, fuels our growth, and enables us to support our customers at every stage in their financial journey.Come join a bank where our employees thrive and are engaged in meaningful work. For the last 6 out of 7 years, Capital Bank was named one of the "Best Banks to Work For" in the U.S. by American Banker.Position PurposeThe Lead Information Security Engineer provides senior-level technical leadership in protecting the bank’s information systems and digital assets. This role will focus on new technical and operational demands driven by AI-accelerated threats, expanded cloud adoption, and emerging regulatory expectations. As such, the Lead Information Security Engineer is responsible for designing, implementing, and continuously improving security controls, leading incident response activities, and serving as a key technical advisor to IT leadership and business stakeholders. The Lead Security Engineer ensures security-by-design across infrastructure, applications, and business processes while maintaining regulatory and audit readinessPosition ResponsibilitiesLead Identification and assessment of vulnerabilities in systems, applications, and networks through regular security assessments and penetration Collaborate with IT teams to prioritize and remediate vulnerabilities in a timely manner.Lead the development, implementation, and maintenance of identity and access management (IAM) procedures to ensure the secure and efficient management of user identities and access rights across the organizationLead security event monitoring from various sources to proactively detect and respond to potential security events. Analyze trends and patterns to improve the organization’s overall security posture.Monitor network traffic and security logs to detect and analyze potential security threats, anomalies, and breaches. Utilize centralized XDR system to identify and respond to unauthorized activities.Manage technical and non-technical projects requiring security oversight to ensure policies, procedures and standards are metDeliver investigations and responses to security incidents, including malware infections, unauthorized access attempts, etc. Coordinate with internal teams to mitigate the impact of security incidents and prevent future occurrencesCollaborate with business units to integrate security controls into businessDevelop and deliver employee education events for employees to raise awareness of security threats and security best practiceParticipate in periodic IT/IS audits, exams and assessments, as neededStay updated on the latest security threats, vulnerabilities, and industry best practicesContinuously improve technical knowledge and skills to adapt to evolving cyber threatsDevelop and implement DR/Business Continuity and Incident Response solutionsPerform other security-related duties as assignedMinimum Education & ExperienceBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experienceMinimum of 5 years of experience in information security or a related role, preferably in a regulated financial institution, leveraging and understanding AI in the context of securityExperience in AI, Relevant certification such as CompTIA Security+, or similarExperience in security monitoring, vulnerability management, and responding to security eventsIn depth and demonstrated knowledge of LAN/WAN technologies, network protocol analysis, firewalls, intrusion detection systems, encryption and VPN technology, and security toolsKnowledge of relevant security and compliance frameworks, standards, and regulations.Ability to guide all levels of the organization with understanding security as it relates to their functional areaAbility to work independently and in a team setting, and across external and internal stakeholder groupsTechnical Knowledge and SkillsMicrosoft Office software suite (Word, Excel, PowerPoint, etc)Microsoft 365 Security and Compliance CentersKnowledge of information security management standards and frameworks, such as PCI-DSS,Proficiency in security tools and technologies, network protocols, and operating systemsStrong analytical and problem-solving skills with an ability to think critically and assess risksEffective communication skills to collaborate with cross-functional teams and convey security- related informationCapable of working in a fast paced, dynamically changing and team-oriented environmentAbility to find innovative solutions while working with existing resourcesCompensationBase Salary Range: $115,000 - $125,000 annually. Final determination of where you are at in the salary range is based on numerous factors such as geographical location, relevant experience, skill set, education, and ability to meet qualifications within the job description. Additional Compensation: This role will include a yearly annual target bonus based on individual performance.Working ArrangementsThis is a 100% remote roleWe’re currently hiring only within our core locations, which include Maryland (MD), District of Columbia (DC), Virginia (VA), Pennsylvania (PA), Delaware (DE), Indiana (IN), Illinois (IL), South Carolina (SC), Florida (FL), and North Carolina (NC).Why Join Us?Join a growing company with a culture that fosters an entrepreneurial spiritComprehensive benefits package including Medical, Dental, Vision, Company Paid Life Insurance, Disability Insurance, and more? Company Contributions to your 401k - Regardless of your contributionEmployee Perks: Paid Parental Leave, Employee Recognition Program, Leadership Program, Tuition Reimbursement Program, Employee Bank Checking Account, and much more!Generous Paid Time Off and Paid Holidays - Including Paid Charity Hours to support volunteer opportunities Supporting Businesses. Helping People. Strengthening Communities. Capital Bank, N.A. is an E-Verify, Affirmative Action and Equal Opportunity Employer.