• Lead technical Red Team initiatives, adversary simulations, offensive testing, and control validation. • Support the definition of methodology, scope, rules of engagement, and prioritization of offensive exercises. • Conduct or guide simulations based on tactics, techniques, and procedures (TTPs) of real threats. • Identify weaknesses in identity, infrastructure, applications, networks, cloud, and operational processes. • Produce mitigation recommendations with technical clarity, risk-based prioritization, and practical guidance. • Correlate offensive findings with Blue Team, CSIRT, IAM, AppSec, architecture, and governance. • Support the development of indicators for exposure, resilience, and control effectiveness.

Role Description This position ensures the technological and digital security of the Bank at an advanced level of ability and technical expertise. Responsible for Network Security Engineering aspect of multiple Information Security platform technologies, including but not limited to; Firewall, Proxy, Remote Access, and WAF. Participate in cross-training with other team members to ensure team has functional knowledge across all Security platforms we support. - Mitigates exposure to cyber threats, security risks, and unauthorized access. - Assesses organization networks, applications, or systems for potential vulnerabilities. - Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. - Maintains a strong knowledge of industry practices, technology, and evolving threats to enhance defenses for the Bank's information systems and resources. - Provide guidance to less experienced associates in the work group. Qualifications - Bachelor's Degree and 8 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 12 years of experience in Systems Engineering, Network, or Information Security. - Knowledge of data security practices, procedures, monitoring and alert tools, and risk management standards. - Knowledge of Firewall Policy Flow, Proxy Administration, Active Directory, Domain Name System, Security Management concepts and solution design. - Ability to clearly communicate risks, threats, and vulnerabilities and proposed implementation plan to mitigate/remediate. Requirements - Technical Security – Facilitates operation of Network Security designs for new and existing solutions. - Performs hardware and software lifecycle support for a range of security tools that secure assigned technical areas and data. - Perform operational support including incident management, processing of change requests, and provide troubleshooting assistance to internal and external customers. - Queue triage and management – Review, Triage, and coordinate response to incidents and tickets assigned to the group. - On-call support – Participate in on-call rotation requiring night and weekend support and availability. - Analysis - Identifies and evaluates potential threats or vulnerabilities in the Bank's networks, applications, or systems. - Compiles data from external or internal sources. - Performs data gathering and review processes on as needed basis. - Security Expertise - Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. - Provides guidance on appropriate security protocols. - Participates in special projects as a technical and security resource. - May assist with training on trends, threats, and applicable technologies. - Issue Resolution - Investigates and resolves network security infrastructure support incidents which may include network, routing, access control, configuration anomalies, and other risks. - Serves as escalation point for Security Operations teams. - Escalates as appropriate. - Business Planning - May assist in the development of security policies, standards, and strategies. Benefits - The base pay for this position is generally between $149,000 and $200,000. - Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. - For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment. - Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. - More information can be found at First Citizens Bank Benefits .

Role Description We are seeking a Cyber Security Lead to join our team. In this role, you will provide strategic leadership for the programs cybersecurity initiatives while overseeing day-to-day security operations, compliance, risk management, and team performance. This role serves as the primary cybersecurity advisor to program leadership, ensuring the security posture aligns with federal requirements, operational objectives, and industry best practices. The ideal candidate is an experienced leader who can translate cybersecurity strategy into operational execution while building and developing a high-performing team. Responsibilities - Strategic Cybersecurity Leadership - Serve as the primary cybersecurity liaison for internal leadership, technical teams, customers, and external stakeholders. - Define and execute the cybersecurity strategy, vision, priorities, and roadmap in alignment with organizational goals and federal security requirements. - Partner with program leadership, engineering teams, and product owners to integrate cybersecurity into program planning and delivery. - Foster a proactive security culture by promoting security awareness and collaboration across the organization. - Cybersecurity Operations - Lead the daily operations of the cybersecurity team, ensuring efficient execution of security activities and operational priorities. - Manage workload distribution, establish priorities, and monitor team performance to ensure timely, high-quality deliverables. - Recruit, onboard, mentor, and develop cybersecurity professionals while fostering a collaborative, high-performing team environment. - Conduct performance management, coaching, and career development to build organizational capability and support long-term growth. - Security Compliance, Risk Management & Governance - Ensure compliance with applicable federal cybersecurity requirements, including NIST, FISMA, Authorization to Operate (ATO), VA policies, and other regulatory frameworks. - Lead security assessments, risk analyses, threat modeling activities, and control evaluations to identify and mitigate organizational risk. - Develop, maintain, and continuously improve cybersecurity policies, standard operating procedures (SOPs), incident response plans, and governance documentation. - Oversee the tracking, validation, and documentation of corrective actions to ensure timely risk mitigation and audit readiness. - Vulnerability Management & Security Operations - Direct enterprise vulnerability management activities, including identification, prioritization, remediation coordination, and validation of security findings. - Collaborate with technical teams to ensure vulnerabilities are remediated within established service-level objectives and compliance timelines. - Monitor the effectiveness of security controls and operational processes, identifying opportunities to strengthen the organization's cybersecurity posture. - Drive continuous process improvement through operational efficiencies, automation, and implementation of security best practices. - Performance Reporting & Continuous Improvement - Establish and maintain cybersecurity metrics, dashboards, and key performance indicators (KPIs) to measure program effectiveness. - Prepare executive-level reports and briefings that communicate cybersecurity posture, operational performance, compliance status, and emerging risks. - Analyze operational trends to identify improvement opportunities and recommend strategic initiatives that enhance cybersecurity maturity. - Champion continuous improvement by evaluating new technologies, optimizing processes, and supporting ongoing analyst training and professional development. Qualifications - Must be able to obtain and maintain the appropriate VA background investigation and PIV credential required to perform the role. - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience) and additional relevant experience may be substituted for education in accordance with contract guidelines. - Minimum of 5–8 years of progressive cybersecurity experience, including leadership or supervisory responsibilities. - Demonstrated experience implementing and managing cybersecurity programs aligned with NIST, FISMA, and ATO requirements. - Demonstrated ability to communicate effectively with technical teams, stakeholders, and leadership, including presenting cyber status, risks, and recommendations. - Strong leadership, communication, and stakeholder management skills with the ability to engage technical and executive audiences. - Experience developing policies, procedures, operational playbooks, and executive reporting. - Demonstrated ability to coordinate across cross-functional teams and drive alignment on security priorities and execution. Requirements - Professional cybersecurity certifications such as CISSP, CISM, Security +, or equivalent. Benefits - Medical, Dental, and Vision. - Health Saving Account (when enrolled in eligible plan) with Company contribution. - Company paid Life, Accidental Death, Short-term & Long-term Disability. - Voluntary Accident, Hospital Indemnity, & Critical Care Insurance. - Voluntary Medical & Dependent Care Flexible Spending Accounts. - Accrued Paid Time Off & Company Paid Holidays. - 401(k) Retirement Plan with Company match.

• Oversee and manage the Security Solutions Engineering Team. • Provide thought-leadership, solution sales account planning, and technical pre-sales leadership for internal sales teams. • Lead a team of Solutions Engineers for the Security Practice. • Directly manage Security Solutions Engineers and Architects. • Responsible for interviewing, hiring and training employees; planning, assigning, and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems. • Lead go-to-market strategy, planning and execution for the Security Practice. • Drive execution of technical go-to-market plan with field sales. • Drive discovery and execution of cross-function solutions to advance our customer’s next generation programs. • Drive cross-functional education and execution across different technology disciplines. • Provide expertise and input to solution development process. • Create solution plays consisting of engineering led solutions that educate field sales on areas of expertise. • Maintain required technical certification requirements for key partners. • Ensure Solutions Architects and Engineers are managing opportunities and proactively driving to closure. • Demonstrate and actively promote an understanding and commitment to the mission of the company.