Lead Cyber Security Engineer

Capital Bank•Rockville, MD

4h•$115,000 - $125,000•Remote

About The Position

The Lead Information Security Engineer provides senior-level technical leadership in protecting the bank’s information systems and digital assets. This role will focus on new technical and operational demands driven by AI-accelerated threats, expanded cloud adoption, and emerging regulatory expectations. As such, the Lead Information Security Engineer is responsible for designing, implementing, and continuously improving security controls, leading incident response activities, and serving as a key technical advisor to IT leadership and business stakeholders. The Lead Security Engineer ensures security-by-design across infrastructure, applications, and business processes while maintaining regulatory and audit readiness.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)
Minimum of 5 years of experience in information security or a related role, preferably in a regulated financial institution, leveraging and understanding AI in the context of security
Experience in AI
Relevant certification such as CompTIA Security+, or similar
Experience in security monitoring, vulnerability management, and responding to security events
In depth and demonstrated knowledge of LAN/WAN technologies, network protocol analysis, firewalls, intrusion detection systems, encryption and VPN technology, and security tools
Knowledge of relevant security and compliance frameworks, standards, and regulations.
Ability to guide all levels of the organization with understanding security as it relates to their functional area
Ability to work independently and in a team setting, and across external and internal stakeholder groups
Microsoft Office software suite (Word, Excel, PowerPoint, etc)
Microsoft 365 Security and Compliance Centers
Knowledge of information security management standards and frameworks, such as PCI-DSS,
Proficiency in security tools and technologies, network protocols, and operating systems
Strong analytical and problem-solving skills with an ability to think critically and assess risks
Effective communication skills to collaborate with cross-functional teams and convey security- related information
Capable of working in a fast paced, dynamically changing and team-oriented environment
Ability to find innovative solutions while working with existing resources

Responsibilities

Lead Identification and assessment of vulnerabilities in systems, applications, and networks through regular security assessments and penetration
Collaborate with IT teams to prioritize and remediate vulnerabilities in a timely manner.
Lead the development, implementation, and maintenance of identity and access management (IAM) procedures to ensure the secure and efficient management of user identities and access rights across the organization
Lead security event monitoring from various sources to proactively detect and respond to potential security events. Analyze trends and patterns to improve the organization’s overall security posture.
Monitor network traffic and security logs to detect and analyze potential security threats, anomalies, and breaches. Utilize centralized XDR system to identify and respond to unauthorized activities.
Manage technical and non-technical projects requiring security oversight to ensure policies, procedures and standards are met
Deliver investigations and responses to security incidents, including malware infections, unauthorized access attempts, etc. Coordinate with internal teams to mitigate the impact of security incidents and prevent future occurrences
Collaborate with business units to integrate security controls into business
Develop and deliver employee education events for employees to raise awareness of security threats and security best practice
Participate in periodic IT/IS audits, exams and assessments, as needed
Stay updated on the latest security threats, vulnerabilities, and industry best practices
Continuously improve technical knowledge and skills to adapt to evolving cyber threats
Develop and implement DR/Business Continuity and Incident Response solutions
Perform other security-related duties as assigned