Manager, Offensive Security: Purple Team

* ** Lead "Defense Improvement Analysis" (DIA):
Deconstruct adversary simulation activities to identify control gaps and document the full lifecycle, from initial discovery to final technical resolution.**
* ** Engineering & Analytics:
Perform advanced analysis of log events using big data tools to identify, recommend, and engineer specific solutions for threat detection and response.**
* ** Strategic

Collaboration:

Serve as the technical bridge between offensive and defensive stakeholders, translating complex adversary TTPs into durable defense strategies and actionable recommendations for both technical and executive audiences.**
* ** Operational Research:
Continuously research emerging threat behaviors and automate repetitive post-exploitation analysis tasks to scale the team’s ability to identify and address novel TTPs.**
* ** Infrastructure & Tooling:
Build and maintain the technical infrastructure and lab environments required to support and evolve Purple Team activities.**
* ** High School Diploma, GED, or equivalent certification.**
* ** At least 4 years of information security experience.**
* ** At least 3 years of experience in Threat Hunting or Detection Engineering within a cloud or hybrid environment.**
* ** At least 2 years of experience analyzing EDR telemetry and bypass techniques.**
* ** 2+ years of experience performing offensive security operations**
* ** 2+ years experience with Databricks, Spark, or similar for security analytics.**
* ** 4+ years of experience in log analysis, threat detection engineering, threat hunt, incident response, forensics**
* ** 4+ years of experience with scripting and compiled languages**
* ** One or more of the following certifications: OSCP, OSCE, GPEN, GXPN, CRTO, GCFA, GCIH, OSTH, GDAT
** Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
#J-18808-Ljbffr