Senior Manager, Cyber Security (Penetration Testing, People Leader)

Capital One • McLean, VA

3d • $209,000 - $286,200 • Hybrid

About The Position

Capital One Offensive Security reduces cyber risk by uncovering vulnerabilities and weaknesses in the enterprise cyber environment through coordinated ethical hacking and penetration testing. This team-lead role works with team members to plan, coordinate, execute, and report on sophisticated ethical hacking exercises that identify cyber vulnerabilities and reduce the risk posture of enterprise systems. The role identifies and exploits security weaknesses, provides actionable recommendations, and collaborates with teams to enhance security. Offensive Security is part of the Cyber Operations and Intelligence program, which identifies opportunities to improve Capital One’s information security posture against a broad range of cyber threats and develops strategies to address them.

The position leads penetration testing across enterprise networks, services, applications, and infrastructure; contributes to a comprehensive testing strategy aligned with organizational security objectives; and analyzes results to provide stakeholders with actionable insights that support remediation. It also keeps team strategies and techniques current with emerging threats, mentors team members, works with developers on remediation guidance and improvements throughout the Software CI/CD pipeline, and communicates technical findings effectively to diverse audiences, including senior management and nontechnical stakeholders.

The role is designated hybrid, with on-site presence required according to Capital One’s hybrid policy at the designated office location. The listed full-time annual salary ranges are $229,900–$262,400 in McLean, Virginia; $250,800–$286,200 in New York, New York; and $209,000–$238,500 in Richmond, Virginia. The role is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives. Capital One describes its benefits as a comprehensive, competitive, and inclusive set of health, financial, and other benefits; eligibility varies by employment and management status.

Requirements

• Bachelor’s degree.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.
• At least 3 years of experience in people leadership.
• At least 4 years of experience in penetration testing.
• At least 2 years of experience with public cloud environments such as AWS, Azure, or GCP.
• At least 1 year of experience scripting with Python, Golang, or C#.

Nice To Haves

• 8 or more years of security testing experience in red teaming, cloud security, application security, or network security.
• 8 or more years of experience with threat modeling concepts and frameworks such as CVSS, MITRE ATT&CK, DREAD, or STRIDE.
• Experience developing Offensive Security tools.
• Experience with code review and secure coding standards.
• OSCP, OSWA, OSWE, OSCE3, GPEN, GXPN, or CRTO certification.

Responsibilities

• Lead and oversee penetration testing of enterprise networks, services, applications, and infrastructure.
• Contribute to a comprehensive penetration testing strategy aligned with the organization’s security objectives.
• Analyze penetration testing results and provide actionable insights to relevant stakeholders to drive remediation and improve security posture.
• Stay informed about emerging threats and attack techniques to keep team strategies and techniques relevant and effective.
• Provide mentorship and guidance to support professional development and enhance team capabilities.
• Work with developers on remediation guidance and improvements throughout the Software CI/CD pipeline.
• Communicate technical information and results clearly to diverse audiences, including senior management and people without a technical background.
• Identify and exploit security weaknesses, provide actionable recommendations, and collaborate with teams to enhance security.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being; eligibility varies based on employment status and management level.
• Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior