Description
We are seeking a Security Leader who is passionate about building automated controls, cloud security architecture, and DevSecOps solutions to join our team. As a Security Engineer, you’ll have the opportunity to be on the forefront of driving major technical transformations and securing enterprise platforms across Capital One.
Responsibilities:
- Serve as a trusted advisor driving the technical strategy for encryption, data protection, and cryptographic policy engineering
- Architect scalable data protection solutions spanning multiple cryptographic disciplines, key management, and tokenization platforms
- Define and lead implementation of security reference architectures and reusable control patterns across multiple business domains
- Design advanced automation frameworks for continuous detection, compliance and remediation
- Partner with platform, data and product engineering teams to embed security into core company platforms and capabilities
- Drive resolution of systemic vulnerabilities across environments
- Influence engineering standards and roadmaps through thought leadership and cross-domain collaboration
- Mentor senior engineers and elevate technical excellence across the broader security organization
- Partner with software, cloud and infrastructure teams to embed security by design into enterprise platforms
- Serve as the technical authority for emerging threats, translating risk intelligence into architectural blueprints and proactive mitigations
Basic Qualifications:
- High School Diploma, GED or Equivalent Certification
- At least 7 years of experience in cybersecurity or information technology
- At least 3 years of people leadership experience
- At least 3 years of experience delivering enterprise-scale security or infrastructure initiatives
Preferred Qualifications:
- Bachelor’s Degree
- 4+ years of experience building specialization and expertise in a focused discipline of cybersecurity
- 6+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing
- 7+ years of experience with data protection technologies such as KMS, HSMs, tokenization engines, and cryptographic policy management
- 8+ years of experience in cloud or infrastructure security engineering
- Experience leading enterprise-scale architecture or automation initiatives
- Hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation) and CI/CD integration
- One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO or GIAC Cloud Security
- Experience in application security and software development in one or more programming languages such as Java, Python, JavaScript, etc.
Salary Information: The minimum and maximum full-time annual salaries for this role are: Richmond, VA: $209,000 - $238,500 for Sr. Manager, Security Engineer
Benefits: Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.