Description
We are seeking a Senior Manager, Cyber Security Product Manager, AppSec to join our team at Capital One. As a Cyber Security Professional, you will evaluate cyber capabilities, threat intelligence, and risk management to drive cybersecurity governance, capability maturation, and risk transformation across the organisation.
Key Responsibilities:
- Develop and own the multi-year product roadmap for Application Security, aligning with enterprise risk appetites and the evolving threat landscape.
- Collaborate with Security Engineering Enablement and Architecture to translate security requirements into scalable, fix-first developer workflows.
- Strategically evaluate Appsec security tools to maximise ROI and maintain a best-in-class toolset.
- Define the product strategy for AI-application security, including secure integration of AI agents into the SDLC, prompt engineering guardrails, and automated remediation pipelines.
- Evangelise the AppSec mission through Office Hours and community forums, simplifying complex technical risks for executive leadership.
- Establish the governance model for vulnerability disposition, ensuring clear SLAs, audit trails, and exception workflows.
Basic Qualifications:
- Bachelor's Degree
- At least 7 years of experience in cybersecurity or information technology
- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
- At least 3 years of application security experience
Preferred Qualifications:
- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information
- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards
- 3+ years of people management experience
- 2+ years of experience developing or overseeing cybersecurity or technology risk programs
- Demonstrated familiarity with industry governance or financial governance processes
- Ability to perform security incident analysis and assist with resolution
- 4+ years in Application or Product Security or Software Engineering with an emphasis on AppSec and vulnerability management strategy
- 4+ years of experience managing AppSec products in a large-scale enterprise
- 2+ years of experience defining standards for AI-augmented development and ethical AI usage
- Professional certifications (CISSP, CISM, OSCP)
- 2+ years of experience working in cloud-native environments
- Knowledge of OWASP Top 10 and software supply chain security
- Experience with automated DAST and manual Penetration Testing
Salary Information:
- McLean, VA: $229,900 - $262,400 per year
- New York, NY: $250,800 - $286,200 per year
- Plano, TX: $209,000 - $238,500 per year
- Richmond, VA: $209,000 - $238,500 per year
- Riverwoods, IL: $209,000 - $238,500 per year
- San Jose, CA: $250,800 - $286,200 per year
Benefits:
- Comprehensive, competitive, and inclusive set of health, financial and other benefits