Lead Cyber Security Engineer

Capital Bank N.A. is a publicly traded bank headquartered in Maryland that provides commercial and consumer banking services along with nationwide lending and credit card products. The Lead Cyber Security Engineer will provide senior-level technical leadership by designing and improving security controls, managing vulnerability and security event monitoring, and leading incident response. The role also advises stakeholders, supports audits and regulatory readiness, and integrates security-by-design across infrastructure, applications, and business processes.

Responsibilities:

• Lead Identification and assessment of vulnerabilities in systems, applications, and networks through regular security assessments and penetration Collaborate with IT teams to prioritize and remediate vulnerabilities in a timely manner
• Lead the development, implementation, and maintenance of identity and access management (IAM) procedures to ensure the secure and efficient management of user identities and access rights across the organization
• Lead security event monitoring from various sources to proactively detect and respond to potential security events. Analyze trends and patterns to improve the organization’s overall security posture
• Monitor network traffic and security logs to detect and analyze potential security threats, anomalies, and breaches. Utilize centralized XDR system to identify and respond to unauthorized activities
• Manage technical and non-technical projects requiring security oversight to ensure policies, procedures and standards are met
• Deliver investigations and responses to security incidents, including malware infections, unauthorized access attempts, etc. Coordinate with internal teams to mitigate the impact of security incidents and prevent future occurrences
• Collaborate with business units to integrate security controls into business
• Develop and deliver employee education events for employees to raise awareness of security threats and security best practice
• Participate in periodic IT/IS audits, exams and assessments, as needed
• Stay updated on the latest security threats, vulnerabilities, and industry best practices
• Continuously improve technical knowledge and skills to adapt to evolving cyber threats
• Develop and implement DR/Business Continuity and Incident Response solutions
• Perform other security-related duties as assigned

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience
• Experience in AI, Relevant certification such as CompTIA Security+, or similar
• Experience in security monitoring, vulnerability management, and responding to security events
• In depth and demonstrated knowledge of LAN/WAN technologies, network protocol analysis, firewalls, intrusion detection systems, encryption and VPN technology, and security tools
• Knowledge of relevant security and compliance frameworks, standards, and regulations
• Ability to guide all levels of the organization with understanding security as it relates to their functional area
• Ability to work independently and in a team setting, and across external and internal stakeholder groups
• Microsoft Office software suite (Word, Excel, PowerPoint, etc)
• Microsoft 365 Security and Compliance Centers
• Knowledge of information security management standards and frameworks, such as PCI-DSS
• Proficiency in security tools and technologies, network protocols, and operating systems
• Strong analytical and problem-solving skills with an ability to think critically and assess risks
• Effective communication skills to collaborate with cross-functional teams and convey security- related information
• Capable of working in a fast paced, dynamically changing and team-oriented environment
• Ability to find innovative solutions while working with existing resources
• Minimum of 5 years of experience in information security or a related role, preferably in a regulated financial institution, leveraging and understanding AI in the context of security