About Us
Capital Bank N.A. is headquartered in Maryland and has been serving our communities since 1999. We stand as a publicly traded company (NASDAQ: CBNK) with over $3 billion in assets. We offer commercial and consumer banking services to clients primarily in Maryland, DC, and Northern Virginia, alongside two nation-wide lending brands; Capital Bank Home Loans and OpenSky, a credit card division that offers and services credit cards across all states. Our personalized approach to banking, paired with cutting-edge technology solutions and a comprehensive suite of products and services, fuels our growth, and enables us to support our customers at every stage in their financial journey.
Come join a bank where our employees thrive and are engaged in meaningful work. For the last 6 out of 7 years, Capital Bank was named one of the "Best Banks to Work For" in the U.S. by American Banker.
Position Purpose
The Lead Information Security Engineer provides senior-level technical leadership in protecting the bank’s information systems and digital assets. This role will focus on new technical and operational demands driven by AI-accelerated threats, expanded cloud adoption, and emerging regulatory expectations. As such, the Lead Information Security Engineer is responsible for designing, implementing, and continuously improving security controls, leading incident response activities, and serving as a key technical advisor to IT leadership and business stakeholders. The Lead Security Engineer ensures security-by-design across infrastructure, applications, and business processes while maintaining regulatory and audit readiness
Position Responsibilities
- Lead Identification and assessment of vulnerabilities in systems, applications, and networks through regular security assessments and penetration Collaborate with IT teams to prioritize and remediate vulnerabilities in a timely manner.
- Lead the development, implementation, and maintenance of identity and access management (IAM) procedures to ensure the secure and efficient management of user identities and access rights across the organization
- Lead security event monitoring from various sources to proactively detect and respond to potential security events. Analyze trends and patterns to improve the organization’s overall security posture.
- Monitor network traffic and security logs to detect and analyze potential security threats, anomalies, and breaches. Utilize centralized XDR system to identify and respond to unauthorized activities.
- Manage technical and non-technical projects requiring security oversight to ensure policies, procedures and standards are met
- Deliver investigations and responses to security incidents, including malware infections, unauthorized access attempts, etc. Coordinate with internal teams to mitigate the impact of security incidents and prevent future occurrences
- Collaborate with business units to integrate security controls into business
- Develop and deliver employee education events for employees to raise awareness of security threats and security best practice
- Participate in periodic IT/IS audits, exams and assessments, as needed
- Stay updated on the latest security threats, vulnerabilities, and industry best practices
- Continuously improve technical knowledge and skills to adapt to evolving cyber threats
- Develop and implement DR/Business Continuity and Incident Response solutions
- Perform other security-related duties as assigned
Minimum Education & Experience
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience
- Minimum of 5 years of experience in information security or a related role, preferably in a regulated financial institution, leveraging and understanding AI in the context of security
- Experience in AI, Relevant certification such as CompTIA Security+, or similar
- Experience in security monitoring, vulnerability management, and responding to security events
- In depth and demonstrated knowledge of LAN/WAN technologies, network protocol analysis, firewalls, intrusion detection systems, encryption and VPN technology, and security tools
- Knowledge of relevant security and compliance frameworks, standards, and regulations.
- Ability to guide all levels of the organization with understanding security as it relates to their functional area
- Ability to work independently and in a team setting, and across external and internal stakeholder groups
Technical Knowledge and Skills
- Microsoft Office software suite (Word, Excel, PowerPoint, etc)
- Microsoft 365 Security and Compliance Centers
- Knowledge of information security management standards and frameworks, such as PCI-DSS,
- Proficiency in security tools and technologies, network protocols, and operating systems
- Strong analytical and problem-solving skills with an ability to think critically and assess risks
- Effective communication skills to collaborate with cross-functional teams and convey security- related information
- Capable of working in a fast paced, dynamically changing and team-oriented environment
- Ability to find innovative solutions while working with existing resources
Compensation
- Base Salary Range: $115,000 - $125,000 annually. Final determination of where you are at in the salary range is based on numerous factors such as geographical location, relevant experience, skill set, education, and ability to meet qualifications within the job description.
- Additional Compensation: This role will include a yearly annual target bonus based on individual performance.
Working Arrangements
-
-
This is a 100% remote role
We’re currently hiring only within our core locations, which include Maryland (MD), District of Columbia (DC), Virginia (VA), Pennsylvania (PA), Delaware (DE), Indiana (IN), Illinois (IL), South Carolina (SC), Florida (FL), and North Carolina (NC).
-
Why Join Us?
- Join a growing company with a culture that fosters an entrepreneurial spirit
- Comprehensive benefits package including Medical, Dental, Vision, Company Paid Life Insurance, Disability Insurance, and more?
- Company Contributions to your 401k - Regardless of your contribution
- Employee Perks: Paid Parental Leave, Employee Recognition Program, Leadership Program, Tuition Reimbursement Program, Employee Bank Checking Account, and much more!
- Generous Paid Time Off and Paid Holidays - Including Paid Charity Hours to support volunteer opportunities
Supporting Businesses. Helping People. Strengthening Communities.
Capital Bank, N.A. is an E-Verify, Affirmative Action and Equal Opportunity Employer.
Bachelor's degree or equivalent experience, 5+ years in information security, security monitoring and incident response expertise, network and security technology knowledge, and familiarity with compliance frameworks.
Key Responsibilities
- assessing vulnerabilities
- monitoring security
- responding incidents
Skills & Tools
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft 365 Security and Compliance Centers, PCI-DSS, XDR, LAN, WAN, VPN
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Maryland or District of Columbia or Virginia or Pennsylvania or Delaware or Indiana or Illinois or South Carolina or Florida or North Carolina or Rockville
- Salary: USD 115,000 – 125,000 / year
- Languages: English
Benefits
- 401k matching
- Generous paid time off
- Tuition reimbursement
- Retirement plan
- Generous parental leave
About Capital Bank
A publicly traded bank providing commercial, consumer, and nationwide lending services. — Industry: Finance