Senior Manager, Cyber Security (Penetration Testing, People Leader)

Capital One • McLean, VA

1d • Hybrid

About The Position

Capital One’s Offensive Security team reduces cyber risk by uncovering vulnerabilities and weaknesses through coordinated ethical hacking and penetration testing. This people-leader role works with team members to plan, coordinate, execute, and report on sophisticated ethical hacking exercises, identify and exploit security weaknesses, provide actionable recommendations, and collaborate with teams to strengthen the security posture of enterprise systems. The position contributes to industry-leading ethical hacking capabilities that protect Capital One’s brand, systems, and data. Offensive Security is part of the Cyber Operations and Intelligence program, which identifies opportunities to improve information security and develops strategies to address a broad range of cyber threats.

This role is designated hybrid and requires adherence to Capital One’s hybrid policy for on-site presence at the employee’s designated office. The position is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

Requirements

• Bachelor’s degree.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.
• At least 3 years of experience in people leadership.
• At least 4 years of experience in penetration testing.
• At least 2 years of experience with public cloud environments such as AWS, Azure, or GCP.
• At least 1 year of experience scripting with Python, Golang, or C#.

Nice To Haves

• 8 or more years of security testing experience in red teaming, cloud security, application security, or network security.
• 8 or more years of experience with threat modeling concepts and frameworks such as CVSS, MITRE ATT&CK, DREAD, or STRIDE.
• Experience developing Offensive Security tools.
• Experience with code review and secure coding standards.
• OSCP, OSWA, OSWE, OSCE3, GPEN, GXPN, or CRTO certification.

Responsibilities

• Lead and oversee penetration testing of enterprise networks, services, applications, and infrastructure.
• Contribute to a comprehensive penetration testing strategy aligned with the organization’s security objectives.
• Analyze penetration testing results and provide actionable insights to stakeholders to drive remediation and improve security posture.
• Stay informed about emerging threats and attack techniques to keep team strategies and techniques relevant and effective.
• Provide mentorship and guidance to support professional development and strengthen team capabilities.
• Work with developers on remediation guidance and improvements throughout the Software CI/CD pipeline.
• Communicate technical information and results clearly to diverse audiences, including senior management and nontechnical audiences.

Benefits

• Comprehensive, competitive, and inclusive health, financial, and other benefits supporting total well-being.
• Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior