VP, Security Engineering

VP, Security Engineering

BANC OF CALIFORNIA AND YOUR CAREER Banc of California, Inc. (NYSE: BANC) is a bank holding company with over $34 billion in assets and the parent company of Banc of California. Banc of California is one of the nation's premier relationship-based business banks, providing banking and treasury management services to small, middle market, and venture backed businesses. The bank also provides full-service payment processing solutions to its clients and serves the Community Association Management industry nationwide through its technology forward platform, Smart Street™.

Banc of California is committed to supporting its local communities through the Banc of California Charitable Foundation and by partnering with organizations that promote financial literacy, job training, small business support, affordable housing, and more. At Banc of California, our success is powered by our people and a shared commitment to delivering meaningful results. We foster an environment where entrepreneurial thinking is encouraged, and accountability and operational excellence are expected.

Our team members are empowered to take ownership, make informed decisions, and make a meaningful impact as the bank continues to grow and evolve. We are dedicated to supporting your growth and wellbeing through comprehensive benefits, robust development opportunities, and inclusive programs that enable you to perform at your best. Together we win!

THE OPPORTUNITY The VP, Security Engineer is responsible for designing, implementing, and maintaining enterprise security controls to protect the organization's systems, applications, and data. This role partners closely with IT, Identity, business units, and application teams to integrate security into architecture and operational processes. A key stakeholder in the evaluation and deployment of security technologies, and supports detection, response, and remediation activities for security incidents.

The Security Engineer is also responsible for the implementation of security standards and automation, assesses emerging threats and vulnerabilities, and provides technical expertise to reduce risk while enabling business operations. Performs all duties in accordance with the Company's policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates.

HOW YOU'LL MAKE A DIFFERENCE Design, implement, and maintain core security engineering controls across SIEM, EDR, email security, DLP, and related platforms As needed, develop, tune, and maintain SIEM detection content, use cases, and analytics aligned to MITRE ATT&CK coverage Engineer and mature threat detection & response capabilities, including automation, enrichment, and response workflows Serve as a technical lead during major security incidents, supporting investigation, containment, remediation, and post incident root cause analysis Partner with incident response and SOC teams to improve detection fidelity, response time, and coverage metrics Implement and enforce secure architecture standards Integrate security controls into cloud, infrastructure, and application environments in collaboration with platform and development teams Evaluate, deploy, and integrate new security tools and technologies in support of the security roadmap Support red & purple team exercises, attack simulations, and detection validation efforts Document standards, runbooks, and engineering procedures to support operational consistency and scale Provide technical mentorship and guidance to junior security engineers and cross functional partners Involved with interviewing and hiring decisions.

Prepare and deliver employee performance evaluations, goal planning, and counseling. Manage, support, coach and train employees. Follow all established policies and procedures. Perform other duties and projects as assigned.

WHAT YOU'LL BRING 8+ years of experience with network security, security engineering and/or incident response. Experience in regulated environments or critical infrastructure preferred (banking, financial services, healthcare, defense, federal government, military) Vision for modern security operations; balances control rigor with business agility. Data-driven continuous improvement, SLA management, and platform reliability. Ability to challenge assumptions and simplify complex systems. Demonstrates knowledge of, adherence to, monitoring and responsibility for compliance with state and federal regulations and laws as they pertain to this position.

Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. Industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities. Computer networking concepts and protocols, and network security methodologies. Host/network access control mechanisms (e.g., access control list,…