Security Engineer Manager, Capital One

• Our Cyber Operations & Intelligence division is searching for an experienced Individual Contributor (IC), Manager level to contribute to our Threat Detection team
• High School Diploma, GED or equivalent certification
• At least 6 years of experience in in Information Technology or Cyber Security
• At least 3 years of experience in Data Science or Machine Learning
• At least 1 year of experience using Security Information and Event Management technologies

Desirable

• Capital One’s Cyber Organization is a fast-paced, dynamic environment committed to enabling and securing the business
• In this role, you will be responsible for solving hard problems using cutting edge technology in the areas of engineering, alert development, and monitoring
• Develop user/entity behavior models to detect compromised identities/credentials/systems
• Utilize Data Science concepts to create methods for detecting malicious cybersecurity threats
• Strategize and implement best practices to detect malicious activity in a fast-paced, ever-changing technology environment
• Lead the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave
• Understand the business drivers of the enterprise and partner with relevant stakeholders to ensure robust monitoring and expanded coverage across our hosts, networks, and applications
• Collaborate with operation teams to build novel detections, establish repeatable processes, and drive automation for containment and remediation activities
• Coordinate with enterprise-wide cyber defense staff to validate alerts and conduct continuous testing
• Demonstrate a deep knowledge of adversary techniques and emerging threats that could adversely impact business activities
• Respond to inquiries from regulatory entities, risk management and audit teams, providing clear and complete documentation of procedures and workflows
• Encourage continued innovation and improvement in how we apply the intelligence lifecycle