Description
We are seeking a Director, Security Engineer to lead our team of security engineers in building and scaling enterprise security platforms and tooling. As a Director, Security Engineer, you will be responsible for leading multiple teams of security engineers, establishing the long-term vision, strategy, and roadmap for security automation, detection, and infrastructure resilience.
Responsibilities:
- Lead multiple teams of security engineers responsible for building and scaling enterprise security platforms and tooling
- Establish the long-term vision, strategy, and roadmap for security automation, detection, and infrastructure resilience
- Partner with product and engineering executives to ensure secure design principles are embedded across technology lifecycles
- Oversee execution of programs that strengthen IAM, data protection, and cloud posture management capabilities
- Translate strategic security objectives into actionable engineering priorities and measurable outcomes
- Champion a culture of security innovation, continuous improvement, and operational excellence across engineering domains
- Develop future security leaders through mentorship, structured growth plans, and exposure to strategic decision-making
- Serve as the technical authority for emerging threats, translating risk intelligence into architectural blueprints and proactive mitigations
- Stay connected to the broader security engineering community outside Capital One, sharing and contributing where appropriate to stay aware of the industry
Basic Qualifications:
- High School Diploma, GED or Equivalent Certification
- At least 9 years of experience in cybersecurity or information technology
- At least 5 years of experience designing or implementing enterprise-scale security architecture in cloud environments
- At least 5 years of people management experience
Preferred Qualifications:
- Bachelor’s Degree
- 5+ years of experience building specialisation and expertise in a focused discipline of cybersecurity
- 7+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing
- 8+ years of experience with security tools such as IAM, endpoint, vulnerability management, or network security technologies
- 10+ years of experience in cloud or infrastructure security engineering
- 10+ years of experience leading security engineering or platform teams in large-scale environments
- Proven ability to define and execute technical strategy aligned to organisation risk appetite
- Proven expertise in enterprise-scale architecture, automation, and secure systems design
- Experience advising executive stakeholders and influencing technology roadmaps
- Recognised thought leader or contributor to security engineering communities
- One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO, or GIAC Cloud Security
- Experience in application security and software development in one or more programming languages such as Java, Python, JavaScript, etc.
Benefits:
- Comprehensive, competitive, and inclusive set of health, financial, and other benefits that support your total well-being