Lead Cyber Security Engineer

About Us

Capital Bank N.A. is headquartered in Maryland and has been serving our communities since 1999. We stand as a publicly traded company (NASDAQ: CBNK) with over $3 billion in assets. We offer commercial and consumer banking services to clients primarily in Maryland, DC, and Northern Virginia, alongside two nation-wide lending brands;
Capital Bank Home Loans and Open Sky, a credit card division that offers and services credit cards across all states. Our personalized approach to banking, paired with cutting-edge technology solutions and a comprehensive suite of products and services, fuels our growth, and enables us to support our customers at every stage in their financial journey.

Come join a bank where our employees thrive and are engaged in meaningful work. For the last 6 out of 7 years, Capital Bank was named one of the "Best Banks to Work For" in the U.S. by American Banker.

The Lead Information Security Engineer provides senior-level technical leadership in protecting the bank’s information systems and digital assets. This role will focus on new technical and operational demands driven by AI-accelerated threats, expanded cloud adoption, and emerging regulatory expectations. As such, the Lead Information Security Engineer is responsible for designing, implementing, and continuously improving security controls, leading incident response activities, and serving as a key technical advisor to IT leadership and business stakeholders.

The Lead Security Engineer ensures security-by-design across infrastructure, applications, and business processes while maintaining regulatory and audit readiness

• Lead Identification and assessment of vulnerabilities in systems, applications, and networks through regular security assessments and penetration Collaborate with IT teams to prioritize and remediate vulnerabilities in a timely manner.
• Lead the development, implementation, and maintenance of identity and access management (IAM) procedures to ensure the secure and efficient management of user identities and access rights across the organization
• Lead security event monitoring from various sources to proactively detect and respond to potential security events. Analyze trends and patterns to improve the organization’s overall security posture.
• Monitor network traffic and security logs to detect and analyze potential security threats, anomalies, and breaches. Utilize centralized XDR system to identify and respond to unauthorized activities.
• Manage technical and non-technical projects requiring security oversight to ensure policies, procedures and standards are met
• Deliver investigations and responses to security incidents, including malware infections, unauthorized access attempts, etc. Coordinate with internal teams to mitigate the impact of security incidents and prevent future occurrences
• Collaborate with business units to integrate security controls into business
• Develop and deliver employee education events for employees to raise awareness of security threats and security best practice
• Participate in periodic IT/IS audits, exams and assessments, as needed
• Stay updated on the latest security threats, vulnerabilities, and industry best practices
• Continuously improve technical knowledge and skills to adapt to evolving cyber threats
• Develop and implement DR/Business Continuity and Incident Response solutions
• Perform other security-related duties as assigned
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience
• Minimum of 5 years of experience in information security or a related role, preferably in a regulated financial institution, leveraging and understanding AI in the context of security
• Experienc…