Security Engineer 4 (SWG, Remote Access)
About The Position
Capital One is seeking a Security Engineer to build automated controls, cloud security architecture, and DevSecOps solutions, and to help secure enterprise platforms. The role involves driving technical transformations across the organization and working in a fast-paced, collaborative, inclusive, and iterative delivery environment. The engineer leads the design and delivery of technology platforms and automated controls across cloud and on-premises environments; architects and implements scalable security solutions; develops automation for vulnerability management, detection, and compliance monitoring; and advises on complex incident response and forensics investigations. The role also partners with software, cloud, and infrastructure teams to embed security by design, evaluates and integrates security technologies, influences engineering standards and reusable patterns, and supports security tools through investigations, analysis, and break-fix work. The position is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives. Capital One also offers a comprehensive set of health, financial, and other benefits; eligibility varies by employment status and management level.
Requirements
- High school diploma, GED, or equivalent certification.
- At least 5 years of experience in cybersecurity or information technology.
- At least 4 years of experience with Secure Web Gateways (SWG), proxy technologies, and remote access solutions.
- At least 2 years of experience designing and implementing automated security solutions.
Nice To Haves
- Bachelor’s degree.
- 3 or more years of experience building specialization and expertise in a focused discipline of cybersecurity.
- 4 or more years of experience with CI/CD security integration, infrastructure as code, or serverless computing.
- 5 or more years of experience with security tools such as IAM, endpoint, vulnerability management, or network security technologies.
- 6 or more years of experience in cloud or infrastructure security engineering.
- Experience leading enterprise-scale architecture or automation initiatives.
- One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO, or GIAC Cloud Security.
- Experience in application security and software development in one or more programming languages such as Java, Python, or JavaScript.
- Hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation) and CI/CD integration.
Responsibilities
- Lead the design and delivery of technology platforms and automated controls across cloud and on-premises environments.
- Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
- Develop advanced automation for vulnerability management, detection, and compliance monitoring.
- Serve as a technical advisor during complex incident response and forensics investigations.
- Partner with software, cloud, and infrastructure teams to embed security by design into enterprise platforms.
- Evaluate and integrate new security technologies, ensuring interoperability and operational scalability.
- Influence and codify engineering standards, patterns, and reusable modules.
- Participate in ongoing support of security tools, including investigations, analysis, and break-fix work.
Benefits
- Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
- Comprehensive health, financial, and other benefits supporting total well-being.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
