IT Security Engineer – Team Lead

If you think you are the right match for the following opportunity, apply after reading the complete description.
Role OverviewThe IT Security Engineer – Team Lead will be instrumental in delivering security into the heart of Pibank software development lifecycle. Operating as the first line of defense, the IT Security Team Lead is a hands-on security generalist who operates and tunes the organization's security stack, manages security projects end to end, and guides a small team of security professionals. This role is the working lead of security operations, covering EDR, email security, vulnerability management, SIEM monitoring, and event investigations. The Team Lead keeps IT and InfoSec management informed with clear, concise reporting on security operations, incidents, and project status.
Key ResponsibilitiesSecurity OperationsAdminister, tune, and maintain EDR, email security, SIEM, vulnerability scanning, and related security toolsMonitor and triage alerts, perform investigations, and contain and remediate security incidentsActive participant during incident response activities, document findings, and drive root cause and lessons learned reviewsRun the vulnerability management lifecycle, including scanning, risk-based prioritization, remediation tracking, and exception managementManage phishing defense, including email filtering, DMARC, DKIM, SPF, user reported phish triage, and simulation campaignsWork with the MSSP to conduct threat hunting and build detection rules aligned to MITRE ATT&CKSupport identity and access security, including MFA, privileged access, and periodic access reviewsDefine and enforce Service Level Agreements (SLAs) for vulnerability remediation based on severity and risk.
Security InitiativesWork with the CISO to plan and execute security projects from scoping through delivery, including tool deployments, upgrades, and control improvementsManage project timelines, dependencies, and coordination with infrastructure, application, and business teamsPartner with the CISO and VP – Information Technology to evaluate new security technologies and recommend improvements to the security stackParticipate in incident response planning, tabletop exercises, and root cause analysis.Translate complex security vulnerabilities into tangible business risks and opportunities for improvement for non-technical stakeholders. xzbcwsv Team LeadershipGuide and mentor a team of two to three security analystsAssign and prioritize daily work, review investigations, and serve as the escalation pointDevelop and maintain runbooks, procedures, and operational standardsSupport analyst growth through coaching, training, and certification goals
Reporting and CommunicationReport security metrics, incident summaries, and project status to VP – Information Technology and CISOTranslate technical findings into clear business risk for leadershipSupport the CISO during internal audits, regulatory examinations, and third-party assessments with evidence and control walkthroughsPartner with IT teams to remediate findings and embed security into operations
Qualifications & ExperienceBachelor’s degree in information technology, Cybersecurity, Computer Science, or equivalent experience5+ years of hands-on cybersecurity experience, with deep focus on security technologiesDirect administration experience with EDR or XDR platforms such as CrowdStrike, email security platforms such as Abnormal, vulnerability management systems such as Qualys or Rapid7, and managing MSSP partners.Proven experience managing incident investigations from detection through remediationFamiliarity with Active Directory, Microsoft Entra ID, Microsoft 365, and Windows and Linux environmentsExperience leading projects or informally leading other analystsStrong written and verbal communication, with the ability to brief management on technical riskFamiliarity with NIST CSF, CIS Controls, and MITRE ATT&CKPreferred experience in a regulated financial services environment supporting FFIEC, GLBA, SOX, or PCI DSS requirements or other highly regulated environmentScripting and automation skills in PowerShell or Python is valuableExposure to Azure or AWS security, Zero Trust, and next generation firewallsOne or more certifications such as Security+ or CySA+, or other security certifications

PiBank is an equal opportunity Employer