Information Security Engineering Manager
Leads security engineering for EagleBank’s IT infrastructure, managing a team of five engineers to deploy, monitor, and optimize security controls (firewalls, AD, cloud tools) while responding to incidents and advising on risk mitigation.
- Compensation
- $141.1K–$241.8K / yr
- Location
- Silver Spring, MD, US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor’s Degree in Computer Science, Information Systems, or related field (or 4 years of equivalent experience)
- 10 years of experience in information security operations/engineering/administration, with emphasis on deploying security tools
- 8 years of experience configuring and implementing information security technologies
- 8 years of experience in Microsoft network security environment (Active Directory, Intune, Azure AD, Azure Sentinel, O365/Security Center)
- 4 years of experience leading a team of technical professionals
- Expert knowledge of security tools (Tenable Nessus, Qualys, CyberArk, Microsoft Sentinel, Microsoft Defender for Cloud, Palo Alto firewalls, Netskope, Proofpoint/Purview)
- Expert knowledge of scripting languages (PowerShell, KQL)
- Expert knowledge of Active Directory, TCP/IP networking, and Windows Group Policy (GPO)
- One or more certifications: CASP, CISSP, CEH, AZ-500
Nice to have
- 4 years of experience with AD tools for inventory/analysis/reporting
- 4 years of experience with malware analysis using sandboxes
- 4 years of security engineering/administration in the financial sector
- One or more certifications: CCNA, ECSA, SC-100, SSCP, ISACA certifications, GIAC certifications (GPPA, GCHI, GPEN, GSE, GSAE, GWAPT)
- Experience with network auditing tools (StealthBits, Varonis)
- Experience leading engineering support for escalations, investigations, and incident response
Full description
Overview
We are a values driven organization putting Relationships FIRST. EagleBank (NASDAQ – EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers.EagleBank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing. Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. With features including maternity and parental leaves, wellness discounts, healthcare premium sharing, employer funding in your HSA account, and 100% 401(k) matching up to 4%, we pride ourselves in the ways we support our internal relationships. The minimum and maximum projected annualized salary for this position is: $141,076.00 to $241,844.00. Additional compensation may be possible based on experience and skills.
Responsibilities
The Information Security Manager is responsible for monitoring, analyzing and maintaining EagleBank's technical security engineering controls in support of EagleBank's Information Security Program. This role will be focused on security engineering of the EagleBank applications and network which includes creation and timely execution of project plans, tool installations, assisting with upgrades of EagleBank's technology environments and ensuring that appropriate external feeds and threat intelligence are integrated into the operational tools. The role executes controls to maintain the confidentiality, integrity and availability of EagleBank's information systems and infrastructure and supports the bank's operational goals.
Major duties and responsibilities:
- Lead a team of five (5) Information Security Engineers.
- Independently identify and propose remediations for risks related to Bank IT infrastructure.
- Support information security projects and lead engineers, vendors, and consultants.
- Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
- In collaboration with the CISO, identify opportunities to mature information security engineering capabilities and processes, executing some and assigning tasks to others for execution.
- Interfaces directly with senior members of IT Operations team to address cross-cutting issues and events.
- Acts as backup Incident Response lead for Information Security team.