Senior Lead Endpoint Security

Senior Lead Endpoint Security

Do you love building and pioneering in the technology space? Do you enjoy solving complex technical problems in a fast-paced, collaborative, inclusive, and iterative delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors, who love to solve real problems and meet real customer needs.

• Identify exploits, gaps and vulnerabilities in existing security posture

• Work with product owners and engineering leads to document and mitigate findings

• Work within and across Agile teams to design, develop, test, implement and support technical solutions across a full-stack of development tools and technologies

• Lead the craftsmanship, availability, resilience and scalability of your solutions

• Bring a passion to stay on top of tech trends, experiment with and learn new technologies, participate in internal & external technology communities, and mentor other members of the engineering community

• Encourage innovation, implementation of cutting‑edge technologies, inclusion, outside‑of‑the‑box thinking, teamwork, self‑organization and diversity

• High School Diploma, GED, or equivalent certification

• At least 6 years of experience working in cybersecurity or information technology

• At least 6 years of experience with endpoint security

• At least 2 years of experience with cloud and container technologies

• At least 2 years of experience securing various OS environments (Mac, Microsoft, Linux)

• At least 2 years of experience securing developer environments

• 8+ years of experience in security tools (AV/EDR, Application Control, Data Loss Prevention, Firewall, Log Management, Privilege Access Management, System Hardening, Behavior Analysis, Hunt and Response, Vulnerability Management)

• 4+ years of experience with configuration and incident management

• 4+ years of experience with AWS (EC2 instances, Lambda functions, RDS, Route
  53)

• 3+ years of experience with Red Team, Vulnerability Management, Threat Intelligence and Threat Hunting

• Proficient knowledge of common cybersecurity frameworks and standards such as MITRE ATT&CK, NIST, and OWASP

• Advanced understanding of network protocols, infrastructure, and operating systems (Windows, Linux, macOS)

• Proven experience in exploiting vulnerabilities in web applications, networks, systems and data store

• Experience with log collection and using SIEM platforms for querying and analyzing log data

• Experience with programming or scripting languages (Python or Go)

• Ability to write SQL queries

• Ability to work independently and in large distributed teams

• Excellent communication skills

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part‑time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $229,900 - $262,400 for Sr Manager, Cyber Technical

New York, NY: $250,800 - $286,200 for Sr Manager, Cyber Technical

Plano, TX: $209,000 - $238,500 for Sr Manager, Cyber Technical

Richmond, VA: $209,000 - $238,500 for Sr Manager, Cyber Technical

San Jose, CA: $250,800 - $286,200 for Sr Manager, Cyber Technical

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on…