[Hiring] Senior Manager, Cyber Threat Researcher, Cyber Intelligence @Capital One

Role Description

The mission of Capital One’s Cyber Intelligence service is to leverage cyber threat intelligence for good. The team’s mission is to counter, disrupt and mitigate cyber adversaries targeting Capital One customers, associates, infrastructure and brand. We are looking for a Cyber Threat Researcher who is able to apply systems thinking, rich technical curiosity, and engineering techniques to accurately detect, characterize, emulate, and predict cyber threats and adversary intentions.

You have a growth mindset when it comes to maintaining expertise and knowledge in threat adversary trends and technologies. We are looking for someone who takes a forward leaning, innovative approach to problem solving, with passion for solving problems at Capital One scale and the desire to collaborate across functional teams. The ideal candidate should be comfortable showing off a constant technical curiosity, “getting into the weeds” on emerging technologies and how they can be used by actors and fraudsters with ill intent.

Responsibilities:

• Create mechanisms to "connect the dots" between different internal and external data sources in order to combine “signals” in data that automatically highlight cyber threats across advanced enterprise threat activities and fraud activity.
• Maintain industry-wide expertise of the current cyber threat landscape and attack vectors.
• Synthesize disparate sets of data from sources such as malware, cyber attack patterns, closed and open-source intelligence, and tokenized consumer flows to inform instrumentation, detections, and threat narratives such as storyboards.
• Build productive relationships with internal teams to contextualize, influence and inform Capital One’s business units on emerging threats.
• Communicate investigative outcomes with technical architecture context and conclusions to a variety of audiences, including company senior leadership and business partners.

Qualifications

• High School Diploma, GED or equivalent certification.
• At least 6 years of experience working in cybersecurity or information technology.
• At least 6 years of experience working in incident response, threat hunting, threat intelligence, forensics, or offensive security.
• At least 5 years of experience in conducting investigations or research into cyber-enabled fraud, cybercrime, or advanced persistent threats.
• At least 3 years of experience with cyber threat intelligence threat frameworks such as Lockheed Martin Cyber Kill Chain, Diamond Model, MITRE ATT&CK, ATLAS, Defense or Engage.
• At least 3 years of experience in programming or scripting with Python, Perl, PHP, PowerShell or SQL.

Requirements

• Bachelor's Degree (Preferred).
• 8+ years of experience working in cybersecurity or information technology (Preferred).
• 8+ years of experience performing incident response, threat hunting, threat intelligence, forensics, or offensive security (Preferred).
• 3+ years of experience with public cloud environments (AWS, Azure, GCP) (Preferred).
• 3+ years of experience in a highly regulated industry (financial sector, financial technology, healthcare, or intelligence community) (Preferred).
• 1+ year of experience working with Generative and Agentic AI tools (Preferred).

Benefits

• Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
• Performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI).