Manager, Cyber Security (Product Network Security)

Capital One is seeking a technical security product leader to deliver game‑changing cybersecurity solutions based on threat, data, and design thinking. The role requires the ability to switch from executive‑level risk conversations to deep technical work, drive strategic roadmaps, and enable the business through security solutions aligned with engineering and business partners.

Responsibilities

• Develop and communicate a risk‑based, data‑driven strategy and outcome‑driven roadmaps for enterprise security services, solutions, and capabilities in partnership with engineering, operations, customers, and other stakeholders.
• Analyze and select alternatives based on threat, risk, desirability, feasibility, and viability.
• Stay abreast of advances in the industry to address the evolving threat landscape.
• Advise executive decision makers based on business and technology risk grounded in threat.
• Facilitate build‑vs‑buy decisions to identify optimal strategies for addressing business and technology risks.
• Develop and lead RFI/RFP processes to assess the market and/or procure effective cyber solutions.
• Lead product backlog grooming to refine cybersecurity and customer objectives, translate vision into detailed initiatives and epics with robust design details and clear acceptance criteria, and ensure requirements are well understood by engineering teams.
• Maintain technical and risk credibility with your team and partners across the enterprise.
• Maintain close ties to various stakeholders, developers, and engineers, ensuring services meet their needs as products evolve.
• Iterate quickly and see products through to production and scale.
• Establish product value propositions, metrics, and key indicators.
• Recruit, motivate, mentor, and lead team members to be their best.

Basic Qualifications

• Bachelor’s Degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.

Preferred Qualifications

• 6+ years of experience with cloud‑based or on‑prem network security services and products (WAF, Bot Management, DDoS Mitigation).
• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
• 5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 5+ years of experience working on teams and presenting cybersecurity information (metrics, threat intelligence, controls, requirements) to stakeholders.
• 4+ years of experience working in multi‑cloud environments.
• 4+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub).
• 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Demonstrated familiarity with industry governance or financial governance processes.
• Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non‑technical stakeholders.

Capital One will not sponsor a new applicant for employment authorization or provide immigration‑related support for this position.

Pay

• McLean, VA: $197,300 – $225,100 (Manager, Cyber Security)
• New York, NY: $215,200 – $245,600 (Manager, Cyber Security)
• Plano, TX: $179,400 – $204,700 (Manager, Cyber Security)
• Richmond, VA: $179,400 – $204,700 (Manager, Cyber Security)
• Other locations: salary range based on local market; actual annualized salary reflected in the offer letter.
• This role is also eligible for performance‑based incentive compensation, which may include cash bonuses and/or long‑term incentives.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support total well‑being. Eligibility varies based on full‑ or part‑time status, exempt or non‑exempt status, and management level.