Security Engineer 4 (Manager) (CaCe)
About The Position
Capital One is seeking a Security Engineer to build automated controls, cloud security architecture, and DevSecOps solutions. The role helps drive technical transformations and secure enterprise platforms across the company. The position leads the design and delivery of technology platforms and automated controls across cloud and on-premises environments. It architects and implements scalable solutions for identity and access management (IAM), endpoint, network, and data protection systems; develops automation for vulnerability management, detection, and compliance monitoring; and provides technical advice during complex incident response and forensics investigations. The engineer partners with software, cloud, and infrastructure teams to embed security by design, evaluates and integrates security technologies, helps establish engineering standards and reusable modules, and supports security tools through investigations, analysis, and break-fix work. This is a hybrid position, subject to Capital One’s policy on required on-site presence at the designated office. The role is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
Requirements
- High school diploma, GED, or equivalent certification.
- At least 5 years of experience in cybersecurity or information technology.
- At least 3 years of experience working in a cloud-based environment.
- At least 2 years of experience designing and implementing automated security solutions.
Nice To Haves
- Bachelor’s degree.
- 3 or more years of experience building specialization and expertise in a focused cybersecurity discipline.
- 4 or more years of experience with CI/CD security integration, infrastructure as code, or serverless computing.
- 5 or more years of experience with security tools such as IAM, endpoint, vulnerability management, or network security technologies.
- 6 or more years of experience in cloud or infrastructure security engineering.
- Experience leading enterprise-scale architecture or automation initiatives.
- One or more professional certifications, such as CISSP, AWS Security Specialty, CIDPRO, or GIAC Cloud Security.
- Experience in application security and software development in one or more programming languages, such as Java, Python, or JavaScript.
- Hands-on experience with Infrastructure-as-Code tools such as Terraform or CloudFormation and CI/CD integration.
Responsibilities
- Lead the design and delivery of technology platforms and automated controls across cloud and on-premises environments.
- Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
- Develop advanced automation for vulnerability management, detection, and compliance monitoring.
- Serve as a technical advisor during complex incident response and forensics investigations.
- Partner with software, cloud, and infrastructure teams to embed security by design into enterprise platforms.
- Evaluate and integrate new security technologies, ensuring interoperability and operational scalability.
- Influence and codify engineering standards, patterns, and reusable modules.
- Participate in ongoing support of security tools, including investigations, analysis, and break-fix.
Benefits
- Comprehensive health, financial, and other benefits supporting total well-being.
- Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
