Information Security Engineering Manager

Eagle Bancorp, Inc.; Fairland (MD); On-site; USD 141,000 - 242,000; Full time

Benefits offered by this job

Maternity and parental leaves

Wellness discounts

Healthcare premium sharing

100% 401(k) matching up to 4%

Job summary

EagleBank seeks an Information Security Manager to lead a 5-person team and drive security engineering across applications and networks. The role ensures confidentiality, integrity, and availability of critical systems while coordinating with IT Operations and external vendors.

Requirements include a BA/BS in a technical field, 10 years of information security experience, and deep knowledge of AD, EDR, SIEM, and cloud security tooling.

Qualifications

• Bachelor's degree in a technical field or equivalent experience.
• 10 years in information security operations or engineering with security tooling experience.
• 8+ years configuring information security technologies and Microsoft security services.
• 4+ years leading a technical team.
• Certifications such as CASP/CEH/AZ-500 optional.
• Experience with vulnerability management, PAM, SIEM, and EDR.
• Strong scripting and AD/GPO knowledge.
• Experience with Netskope, Proofpoint, and related email security tools.

Responsibilities

• Lead a team of five Information Security Engineers.
• Identify and remediate risks in Bank IT infrastructure.
• Drive security projects with engineers, vendors, and consultants.
• Review and tune network security tool configurations and architectures.
• Collaborate with the CISO to mature security engineering capabilities.
• Coordinate with IT Operations to address cross-cutting issues.

Skills

PowerShell

KQL

Active Directory

Windows Security

Threat hunting

Education

Bachelor's Degree in Computer Science or Information Systems

Tools

Tenable Nessus

Qualys

Nexpose

CyberArk

Microsoft Defender for Cloud

Microsoft Sentinel

Palo Alto firewalls

Panorama

Netskope

Proofpoint

Purview

Intune

Azure AD

Active Directory

Job description

Overview

We are a values driven organization putting Relationships FIRST. EagleBank (NASDAQ - EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers.EagleBank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another's experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing. Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. With features including maternity and parental leaves, wellness discounts, healthcare premium sharing, employer funding in your HSA account, and 100% 401(k) matching up to 4%, we pride ourselves in the ways we support our internal relationships. The minimum and maximum projected annualized salary for this position is: $141,076.00 to $241,844.00. Additional compensation may be possible based on experience and skills.

Responsibilities

The Information Security Manager is responsible for monitoring, analyzing and maintaining EagleBank's technical security engineering controls in support of EagleBank's Information Security Program. This role will be focused on security engineering of the EagleBank applications and network which includes creation and timely execution of project plans, tool installations, assisting with upgrades of EagleBank's technology environments and ensuring that appropriate external feeds and threat intelligence are integrated into the operational tools. The role executes controls to maintain the confidentiality, integrity and availability of EagleBank's information systems and infrastructure and supports the bank's operational goals.

Major duties and responsibilities:

• Lead a team of five (5) Information Security Engineers.
• Independently identify and propose remediations for risks related to Bank IT infrastructure.
• Support information security projects and lead engineers, vendors, and consultants.
• Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
• In collaboration with the CISO, identify opportunities to mature information security engineering capabilities and processes, executing some and assigning tasks to others for execution.
• Interfaces directly with senior members of IT Operations team to address cross-cutting issues and events.
• Acts as backup Incident Response lead for Information Security team.
• Work with managed service providers, network administrators, and Security Operations to resolve problems, evaluate new solutions, recommend changes, and investigate incidents.
• Analyze reports, identify, and distribute action items or service tickets to support teams or vendors to address InfoSec engineering issues.
• Document and submit Change Management requests on behalf of the InfoSec engineering team and present changes to Change Advisory Board when appropriate.
• Sets weekly tasks and runs regular security engineering team meetings and one on one is with direct reports. Responsible for performance, setting annual goals including employee development and training.
• Manage and distribute the triage and analysis of security events escalated from the Tier-2 support teams.
• Act as Backup to the CISO.

Qualifications

Requirements:

• Bachelor’s Degree in Arts/Sciences (BA/BS) in Computer Science or Information Systems, Information Technology or related focused technical training or in lieu 4 additional years of engineering and project management experience
• 10 years experience in a combination of information security operations/engineering/administration with emphasis on deploying security tools and capabilities
• 8 years experience configuring and implementing information security technologies
• 8 years experience working in Microsoft network security environment with knowledge of Active Directory, Intune, Azure AD and Azure Sentinel, O365 / Security Center
• 4 years experience leading a team of technical professionals
• One or more of the following certifications (or equivalent): − CASP (CompTIA Advanced Security Practitioner) or ISC2 CISSP − EC-Council Certified Ethical Hacker (CEH) − AZ-500 Microsoft Azure Security Engineer Associate
• Expert knowledge of security tools used for vulnerability management (Tenable Nessus, Qualys, Nexpose), privileged access management (CyberArk), Security Event Incident Management (Microsoft Sentinel), Microsoft Endpoint Security (EDR)
• Expert knowledge of scripting languag(es) such as PowerShell, KQL
• Expert knowledge of Microsoft Defender for Cloud
• Expert knowledge of Active Directory (AD)
• Expert knowledge of TCP/IP networking: networking topology, protocols and services
• Expert knowledge of Palo Alto firewalls, Panorama and firewall operations
• Experience with operations and optimization of Secure Web Gateway (preferably Netskope)
• Experience with Email Security tooling (Proofpoint, Purview) and optimization
• Experience leading tool, application, and system security assessments / evaluations
• Experience with security elements of Intune, Conditional Access Policy implementations
• Experience with security engineering of Linux servers
• Strong Active Directory and Windows Group Policy (GPO) knowledge
• Experience leading security collaboration with operations teams responsible for networking technology and protocols, including routers, switches, VPNs, email gateways

Preferences:

• 4 years experience with AD tools for inventory, analysis and report on Active Directory structure, objects, permissions, etc
• 4 years experience with malware analysis using sandboxes
• 4 years security engineering/administration in the financial sector
• One or more of the following certifications (or equivalent): − CCNA − EC-Council Certified Security Analyst (ECSA) − SC-100 Microsoft Cybersecurity Architect − ISC2 System Security Certified Practitioner (SSCP) − ISACA certifications (CRISC) − GSE GIAC Security Expert − GIAC Certifications such as GPPA, GCHI, GPEN − GSAE (GIAC Security Audit Essentials) − GWAPT (GIAC Certified Web Application Penetration Tester)
• Experience with network auditing tools such as StealthBits, Varonis
• Experience leading engineering support for escalations, investigations, and incident response