Information Security Engineering Manager

EagleBank•Silver Spring, MD

19d

About The Position

We are a values driven organization putting Relationships FIRST. EagleBank (NASDAQ – EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers. EagleBank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing. Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. The Information Security Manager is responsible for monitoring, analyzing and maintaining EagleBank's technical security engineering controls in support of EagleBank's Information Security Program. This role will be focused on security engineering of the EagleBank applications and network which includes creation and timely execution of project plans, tool installations, assisting with upgrades of EagleBank's technology environments and ensuring that appropriate external feeds and threat intelligence are integrated into the operational tools. The role executes controls to maintain the confidentiality, integrity and availability of EagleBank's information systems and infrastructure and supports the bank's operational goals.

Requirements

Bachelor’s Degree in Arts/Sciences (BA/BS) in Computer Science or Information Systems, Information Technology or related focused technical training or in lieu 4 additional years of engineering and project management experience
10 years experience in a combination of information security operations/engineering/administration with emphasis on deploying security tools and capabilities
8 years experience configuring and implementing information security technologies
8 years experience working in Microsoft network security environment with knowledge of Active Directory, Intune, Azure AD and Azure Sentinel, O365 / Security Center
4 years experience leading a team of technical professionals
One or more of the following certifications (or equivalent): − CASP (CompTIA Advanced Security Practitioner) or ISC2 CISSP − EC-Council Certified Ethical Hacker (CEH) − AZ-500 Microsoft Azure Security Engineer Associate
Expert knowledge of security tools used for vulnerability management (Tenable Nessus, Qualys, Nexpose), privileged access management (CyberArk), Security Event Incident Management (Microsoft Sentinel), Microsoft Endpoint Security (EDR)
Expert knowledge of scripting languag(es) such as PowerShell, KQL
Expert knowledge of Microsoft Defender for Cloud
Expert knowledge of Active Directory (AD)
Expert knowledge of TCP/IP networking: networking topology, protocols and services
Expert knowledge of Palo Alto firewalls, Panorama and firewall operations
Experience with operations and optimization of Secure Web Gateway (preferably Netskope)
Experience with Email Security tooling (Proofpoint, Purview) and optimization
Experience leading tool, application, and system security assessments / evaluations
Experience with security elements of Intune, Conditional Access Policy implementations
Experience with security engineering of Linux servers
Strong Active Directory and Windows Group Policy (GPO) knowledge
Experience leading security collaboration with operations teams responsible for networking technology and protocols, including routers, switches, VPNs, email gateways

Nice To Haves

4 years experience with AD tools for inventory, analysis and report on Active Directory structure, objects, permissions, etc
4 years experience with malware analysis using sandboxes
4 years security engineering/administration in the financial sector
One or more of the following certifications (or equivalent): − CCNA − EC-Council Certified Security Analyst (ECSA) − SC-100 Microsoft Cybersecurity Architect − ISC2 System Security Certified Practitioner (SSCP) − ISACA certifications (CRISC) − GSE GIAC Security Expert − GIAC Certifications such as GPPA, GCHI, GPEN − GSAE (GIAC Security Audit Essentials) − GWAPT (GIAC Certified Web Application Penetration Tester)
Experience with network auditing tools such as StealthBits, Varonis
Experience leading engineering support for escalations, investigations, and incident response

Responsibilities

Lead a team of five (5) Information Security Engineers.
Independently identify and propose remediations for risks related to Bank IT infrastructure.
Support information security projects and lead engineers, vendors, and consultants.
Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
In collaboration with the CISO, identify opportunities to mature information security engineering capabilities and processes, executing some and assigning tasks to others for execution.
Interfaces directly with senior members of IT Operations team to address cross-cutting issues and events.
Acts as backup Incident Response lead for Information Security team.
Work with managed service providers, network administrators, and Security Operations to resolve problems, evaluate new solutions, recommend changes, and investigate incidents.
Analyze reports, identify, and distribute action items or service tickets to support teams or vendors to address InfoSec engineering issues.
Document and submit Change Management requests on behalf of the InfoSec engineering team and present changes to Change Advisory Board when appropriate.
Sets weekly tasks and runs regular security engineering team meetings and one on one is with direct reports.
Responsible for performance, setting annual goals including employee development and training.
Manage and distribute the triage and analysis of security events escalated from the Tier-2 support teams.
Act as Backup to the CISO.