About This Role
Directing the building and scaling of enterprise security platforms and tooling is at the heart of this engineering leadership role. This position suits a security engineer who is passionate about automated controls, cloud security architecture, and DevSecOps solutions, and who will drive technical transformations and secure enterprise platforms.
Responsibilities
- Lead multiple teams of security engineers responsible for building and scaling enterprise security platforms and tooling
- Establish the long-term vision, strategy, and roadmap for security automation, detection and infrastructure resilience
- Partner with product and engineering executives to ensure secure design principles are embedded across technology lifecycles
- Oversee execution of programs that strengthen IAM, data protection and cloud posture management capabilities
- Translate strategic security objectives into actionable engineering priorities and measurable outcomes
- Champion a culture of security innovation, continuous improvement, and operational excellence across engineering domains
- Develop future security leaders through mentorship, structured growth plans and exposure to strategic decision making
- Serve as the technical authority for emerging threats, translating risk intelligence into architectural blueprints and proactive mitigations
- Stay connected to the broader security engineering community outside Capital One, sharing and contributing where appropriate to stay aware of the industry
Requirements
- High School Diploma, GED or Equivalent Certification
- At least 9 years of experience in cybersecurity or information technology
- At least 5 years of experience designing or implementing enterprise-scale security architecture in cloud environments
- At least 5 years of people management experience
Nice to have:
- Bachelor’s Degree
- 5+ years of experience building specialization and expertise in a focused discipline of cybersecurity
- 7+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing
- 8+ years of experience with security tools such as IAM, endpoint, vulnerability management or network security technologies
- 10+ years of experience in cloud or infrastructure security engineering
- 10+ years of experience leading security engineering or platform teams in large-scale environments
- Proven ability to define and execute technical strategy aligned to organization risk appetite
- Proven expertise in enterprise-scale architecture, automation, and secure systems design
- Experience advising executive stakeholders and influencing technology roadmaps
