LogoFresh Jobs Ahead
Capital One
Capital One
H1B Visa SponsorBankingFinanceFintech
Capital One is a financial services and fintech company offering credit cards, auto loans, banking, and savings products. Its work combines financial expertise with technology and digital tools to improve how customers manage money. The company’s careers focus includes building customer-oriented solutions within a diverse and inclusive workforce.
LinkedIn
Company Jobs

Detection Engineering Manager, Cybersecurity — Capital One (Onsite)

Lead Capital One’s endpoint detection engineering function with AI-assisted workflows, threat research, and Detection-as-Code practices. Guide engineers while strengthening detection coverage, cyber risk governance, and operational effectiveness.

USUnited StatesNYNew YorkTXTexasVAVirginia
$179,400 – $245,600 / year
On-siteFull-timeMiddleSeniorEnglish RequiredSecurity Engineer
AWSCloudCyber SecurityPythonSplunk

Description

  • Apply LLMs and machine learning to automate detection logic, summarize attack chains, reduce false positives, and speed development
  • Lead the design, development, and maintenance of detection rules through Detection-as-Code, GenAI-assisted workflows, and CI/CD pipelines
  • Create behavioral detections for adversary patterns, tactics, techniques, procedures, and anomalous endpoint activity
  • Analyze user and entity behavior, process telemetry, and correlated signals to separate malicious activity from benign behavior at scale
  • Use MITRE ATT&CK to map endpoint coverage, prioritize gaps, and guide remediation
  • Make detection architecture decisions that balance fidelity, alert volume, and operational risk
  • Perform hypothesis-driven threat research across enterprise endpoints using Red Team methods and adversary TTPs
  • Convert attacker techniques into high-fidelity detections and identify missing coverage proactively
  • Manage endpoint detection coverage end to end, including telemetry onboarding, alert deployment, tuning, and ongoing coverage analysis
  • Collaborate with business leaders, the Cyber Security Operations Center, Cyber Threat Intelligence, and Cyber Threat Hunt teams
  • Maintain documentation that satisfies fintech compliance and audit requirements
  • Mentor engineers in security concepts, AI-enabled workflows, and detection engineering practices

Requirements

  • Bachelor’s degree
  • At least 5 years of experience in cybersecurity or information technology
  • At least 4 years of experience evaluating, contributing to, or supporting cybersecurity capability development
  • At least 4 years of experience working with endpoint or host logs, including Windows Event Logs, Sysmon, and EDR telemetry
  • At least 2 years of experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, and Microsoft Defender
  • At least 1 year of experience applying machine learning or data science to security
  • 6+ years of experience in threat detection, threat hunting, or security engineering preferred
  • 5+ years of experience with cybersecurity frameworks and concepts including NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP preferred
  • 5+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events preferred
  • 5+ years of experience collaborating on teams and presenting cybersecurity information to stakeholders preferred
  • 4+ years of experience with Python preferred
  • 4+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub preferred
  • 4+ years of experience with data science concepts and techniques such as anomaly detection and behavioral analytics preferred
  • Ability to analyze security incidents and support resolution efforts
  • Experience with CrowdStrike Falcon, including custom IOAs, detection tuning, and telemetry analysis
  • Experience with endpoint forensics, malware triage, or adversary emulation exercises focused on endpoint environments
  • GCIA, GCIH, CISSP, GMON, GREM, GCTD, MLE, or cloud certifications preferred
  • Capital One will not sponsor new applicants for employment authorization or provide immigration-related support

Benefits

  • Performance-based incentive compensation, including cash bonuses and/or long-term incentives
  • Comprehensive health, financial, and other benefits supporting overall well-being
  • Reasonable workplace accommodations
  • Drug-free workplace

Related Jobs

P

Project Engineer – Industrial Automation (Hybrid, Pewaukee)

Power/mation
201 – 500 Employees
ManufacturingSaaS
USUnited StatesWIWisconsin
$75,000 – $115,000 / year
HybridFull-timeMiddleSeniorEnglish RequiredEngineer

Power/mation is seeking a Project Engineer to deliver industrial automation projects, including control panels and electrical systems. The role covers quoting, project planning, customer implementation, documentation, and coordination through completion.

Open