Description
Capital One is seeking a technical security product leader to deliver game-changing cybersecurity solutions based on threat, data, and design thinking.
As a Manager, Cyber Security Product Owner, you will develop and communicate a risk-based and data-driven strategy and outcome-driven roadmaps for enterprise security services, solutions, and capabilities, in partnership with engineering and operations partners, customers, and other stakeholders.
Key responsibilities:
- Analyze and select alternatives based on threat, risk, desirability, feasibility, and viability
- Keep abreast of advances in industry to address the threat landscape
- Advise executive decision makers based on business and technology risk grounded in threat
- Facilitate build vs. buy decisions to identify optimal strategies for addressing business and technology risks
- Develop and lead RFI/RFPs to assess the market and/or procure effective cyber solutions
- Lead product backlog grooming to refine cybersecurity and customer objectives, translate vision into detailed initiatives and epics featuring robust design details and clear acceptance criteria, and ensure requirements are well understood by the engineering teams
- Maintain technical and risk credibility with your own team and with partners across the enterprise
- Iterate quickly and see the products through to production and scale
- Establish product value propositions, metrics, and key indicators
- Recruit, motivate, mentor, and lead those around you to be their best
Basic qualifications:
- Bachelor's Degree
- At least 5 years of experience in cybersecurity or information technology
- At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Preferred qualifications:
- 6+ years of experience with cloud based or on-prem network security services and products (WAF, Bot Management, DDoS Mitigation)
- 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- 5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or, events
- 5+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements
- 4+ years of experience working in multi-cloud environments
- 4+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub)
- 2+ years of experience developing or interpreting cybersecurity metrics or dashboards
The minimum and maximum full-time annual salaries for this role are: McLean, VA: $197,300 - $225,100 New York, NY: $215,200 - $245,600 Plano, TX: $179,400 - $204,700 Richmond, VA: $179,400 - $204,700
This role is also eligible to earn performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI).