Simmons Bank

Simmons Bank is a regional financial institution with roots stretching back to 1903, now operating across six states - Arkansas, Kansas, Missouri, Oklahoma, Tennessee, and Texas - from roughly 200 locations. The bank’s attack surface spans a modern product stack: personal and business banking delivered through online and mobile channels, commercial lending that covers everything from agricultural loans to aviation financing, and wealth management services that handle institutional trust and retirement plan assets. That breadth means the threat model isn’t abstract - it’s credential stuffing against consumer portals, business email compromise targeting treasury management workflows, and fraud vectors woven into loan origination pipelines. With around 2,800 associates on the network and a century-plus of legacy infrastructure layered under digital transformation, the security team operates in an environment where regulatory pressure from banking regulators, PCI-DSS compliance, and GLBA requirements are non-negotiable baseline constraints. The work likely touches endpoint detection across branch offices, identity and access management for a workforce that handles sensitive financial data daily, and application security for the digital banking platform and mobile app that serve retail and commercial customers alike. For cybersecurity practitioners, the draw is scale without the megabank bureaucracy - a team embedded in a bank that is actively growing its digital footprint across multiple states, handling real financial risk in sectors like agriculture, healthcare, and construction lending. The stakes are concrete: protecting transaction integrity, securing customer PII across banking and wealth management lines, and defending against the phishing and ransomware campaigns that specifically target regional financial institutions.