Information Security Engineering Manager

EagleBank; Fairland (MD); On-site; USD 141,000 - 242,000; Full time

Job summary

EagleBank seeks an Information Security Manager to lead a team of security engineers and drive the bank's security engineering program in Maryland. The role focuses on protecting information systems, implementing tools, and maturing security processes.

The position requires extensive experience in security operations, strong AD and cloud security skills, and collaboration with IT Operations and vendors to ensure confidentiality, integrity, and availability of critical banking systems.

Qualifications

• :Bachelor's degree in Arts/Sciences (BA/BS) in Computer Science or Information Systems, Information Technology or related focused technical training or in lieu 4 additional years of engineering and project management experience
• 10 years experience in a combination of information security operations/engineering/administration with emphasis on deploying security tools and capabilities
• 8 years experience configuring and implementing information security technologies
• 8 years experience working in Microsoft network security environment with knowledge of Active Directory, Intune, Azure AD and Azure Sentinel, O365 / Security Center
• 4 years experience leading a team of technical professionals
• One or more of the following certifications (or equivalent)
• Expert knowledge of security tools used for vulnerability management (Tenable Nessus, Qualys, Nexpose), privileged access management (CyberArk), Security Event Incident Management (Microsoft Sentinel), Microsoft Endpoint Security (EDR)
• Expert knowledge of scripting languag(es) such as PowerShell, KQL
• Expert knowledge of Microsoft Defender for Cloud
• Expert knowledge of Active Directory (AD)
• Expert knowledge of TCP/IP networking: networking topology, protocols and services
• Expert knowledge of Palo Alto firewalls, Panorama and firewall operations
• Experience with operations and optimization of Secure Web Gateway (preferably Netskope)
• Experience with Email Security tooling (Proofpoint, Purview) and optimization
• Experience leading tool, application, and system security assessments / evaluations
• Experience with security elements of Intune, Conditional Access Policy implementations
• Experience with security engineering of Linux servers
• Strong Active Directory and Windows Group Policy (GPO) knowledge
• Experience leading security collaboration with operations teams responsible for networking technology and protocols, including routers, switches, VPNs, email gateways

Responsibilities

• Lead a team of five Information Security Engineers.
• Independently identify and propose remediations for risks related to Bank IT infrastructure.
• Support information security projects and lead engineers, vendors, and consultants.
• Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
• Collaborate with CISO to mature information security engineering capabilities and processes, assigning tasks as needed.
• Interface with senior IT Operations members to address cross-cutting issues.
• Act as backup Incident Response lead for Information Security team.
• Work with managed service providers, network admins, and Security Operations to resolve problems and investigate incidents.
• Analyze reports, identify action items or service tickets for support teams or vendors.
• Document and submit Change Management requests and present changes to Change Advisory Board when appropriate.
• Set weekly tasks and run security engineering team meetings; oversee performance and training.
• Manage triage and analysis of security events escalated from Tier-2 support.
• Act as Backup to the CISO.

Skills

PowerShell

KQL

Active Directory

Azure

Azure Sentinel

Nessus

Qualys

Nexpose

CyberArk

Microsoft Defender for Cloud

GPO

Firewall management

Education

Bachelor's degree in Computer Science / Information Systems or related

Tools

Tenable Nessus

Qualys

Nexpose

CyberArk

Microsoft Sentinel

Microsoft Defender for Cloud

Intune

Palo Alto firewalls

Job description

Overview

We are a values driven organization putting Relationships FIRST. EagleBank (NASDAQ – EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers.EagleBank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing. Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. With features including maternity and parental leaves, wellness discounts, healthcare premium sharing, employer funding in your HSA account, and 100% 401(k) matching up to 4%, we pride ourselves in the ways we support our internal relationships. The minimum and maximum projected annualized salary for this position is: $141,076.00 to $241,844.00. Additional compensation may be possible based on experience and skills.

Responsibilities

The Information Security Manager is responsible for monitoring, analyzing and maintaining EagleBank's technical security engineering controls in support of EagleBank's Information Security Program. This role will be focused on security engineering of the EagleBank applications and network which includes creation and timely execution of project plans, tool installations, assisting with upgrades of EagleBank's technology environments and ensuring that appropriate external feeds and threat intelligence are integrated into the operational tools. The role executes controls to maintain the confidentiality, integrity and availability of EagleBank's information systems and infrastructure and supports the bank's operational goals.

Major duties and responsibilities:

• Lead a team of five (5) Information Security Engineers.
• Independently identify and propose remediations for risks related to Bank IT infrastructure.
• Support information security projects and lead engineers, vendors, and consultants.
• Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
• In collaboration with the CISO, identify opportunities to mature information security engineering capabilities and processes, executing some and assigning tasks to others for execution.
• Interfaces directly with senior members of IT Operations team to address cross-cutting issues and events.
• Acts as backup Incident Response lead for Information Security team.
• Work with managed service providers, network administrators, and Security Operations to resolve problems, evaluate new solutions, recommend changes, and investigate incidents.
• Analyze reports, identify, and distribute action items or service tickets to support teams or vendors to address InfoSec engineering issues.
• Document and submit Change Management requests on behalf of the InfoSec engineering team and present changes to Change Advisory Board when appropriate.
• Sets weekly tasks and runs regular security engineering team meetings and one on one is with direct reports. Responsible for performance, setting annual goals including employee development and training.
• Manage and distribute the triage and analysis of security events escalated from the Tier-2 support teams.
• Act as Backup to the CISO.

Qualifications

Requirements:

• Bachelor's Degree in Arts/Sciences (BA/BS) in Computer Science or Information Systems, Information Technology or related focused technical training or in lieu 4 additional years of engineering and project management experience
• 10 years experience in a combination of information security operations/engineering/administration with emphasis on deploying security tools and capabilities
• 8 years experience configuring and implementing information security technologies
• 8 years experience working in Microsoft network security environment with knowledge of Active Directory, Intune, Azure AD and Azure Sentinel, O365 / Security Center
• 4 years experience leading a team of technical professionals
• One or more of the following certifications (or equivalent): − CASP (CompTIA Advanced Security Practitioner) or ISC2 CISSP − EC-Council Certified Ethical Hacker (CEH) − AZ-500 Microsoft Azure Security Engineer Associate
• Expert knowledge of security tools used for vulnerability management (Tenable Nessus, Qualys, Nexpose), privileged access management (CyberArk), Security Event Incident Management (Microsoft Sentinel), Microsoft Endpoint Security (EDR)
• Expert knowledge of scripting languag(es) such as PowerShell, KQL
• Expert knowledge of Microsoft Defender for Cloud
• Expert knowledge of Active Directory (AD)
• Expert knowledge of TCP/IP networking: networking topology, protocols and services
• Expert knowledge of Palo Alto firewalls, Panorama and firewall operations
• Experience with operations and optimization of Secure Web Gateway (preferably Netskope)
• Experience with Email Security tooling (Proofpoint, Purview) and optimization
• Experience leading tool, application, and system security assessments / evaluations
• Experience with security elements of Intune, Conditional Access Policy implementations
• Experience with security engineering of Linux servers
• Strong Active Directory and Windows Group Policy (GPO) knowledge
• Experience leading security collaboration with operations teams responsible for networking technology and protocols, including routers, switches, VPNs, email gateways

Preferences:

• 4 years experience with AD tools for inventory, analysis and report on Active Directory structure, objects, permissions, etc
• 4 years experience with malware analysis using sandboxes
• 4 years security engineering/administration in the financial sector
• One or more of the following certifications (or equivalent): − CCNA − EC-Council Certified Security Analyst (ECSA) − SC-100 Microsoft Cybersecurity Architect − ISC2 System Security Certified Practitioner (SSCP) − ISACA certifications (CRISC) − GSE GIAC Security Expert − GIAC Certifications such as GPPA, GCHI, GPEN − GSAE (GIAC Security Audit Essentials) − GWAPT (GIAC Certified Web Application Penetration Tester)
• Experience with network auditing tools such as StealthBits, Varonis
• Experience leading engineering support for escalations, investigations, and incident response