Manager, Cyber Security (Product Network Security)

About the role

Capital One is seeking a technical security product leader to deliver game‑changing cybersecurity solutions based on threat, data, and design thinking. The company values Excellence and Doing the Right Thing and delivers financial products through modern technology and constant innovation at massive scale. The role requires the ability to switch from executive‑level risk conversations to deep technical work, drive strategic roadmaps, stay current on emerging threats, question existing processes, and align security solutions with the needs of engineering and business partners. The leader must thrive in a fast‑paced, technology‑forward environment and enable the business through security capabilities.

Responsibilities

• Develop and communicate a risk‑based, data‑driven strategy and outcome‑driven roadmaps for enterprise security services, solutions, and capabilities in partnership with engineering, operations, customers, and other stakeholders.
• Analyze and select alternatives based on threat, risk, desirability, feasibility, and viability.
• Stay abreast of industry advances to address the evolving threat landscape.
• Advise executive decision‑makers on business and technology risk grounded in threat intelligence.
• Facilitate build‑vs‑buy decisions to identify optimal strategies for addressing risks.
• Develop and lead RFI/RFP processes to assess the market and procure effective cyber solutions.
• Lead product backlog grooming to translate vision into detailed initiatives and epics with robust design details, clear acceptance criteria, and well‑understood requirements for engineering teams.
• Maintain technical and risk credibility with internal teams and enterprise‑wide partners.
• Collaborate closely with developers and engineers to ensure services meet their needs as products evolve.
• Iterate quickly and see products through to production and scale.
• Establish product value propositions, metrics, and key performance indicators.
• Recruit, motivate, mentor, and lead team members to achieve their best.

Basic Qualifications

• Bachelor’s Degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 4 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.

Preferred Qualifications

• 6+ years of experience with cloud‑based or on‑prem network security services and products (e.g., WAF, Bot Management, DDoS Mitigation).
• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
• 5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 5+ years of experience presenting cybersecurity information (metrics, threat intelligence, controls, requirements) to stakeholders.
• 4+ years of experience working in multi‑cloud environments.
• 4+ years of experience using security tools (e.g., Splunk, CrowdStrike, Qualys, AWS Security Hub).
• 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Demonstrated familiarity with industry or financial governance processes.
• Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and translate technical findings into clear, actionable reports for both technical and non‑technical audiences.

Pay

McLean, VA: $197,300 – $225,100; New York, NY: $215,200 – $245,600; Plano, TX: $179,400 – $204,700; Richmond, VA: $179,400 – $204,700. Salaries for other locations will be based on the local pay range. This role is also eligible for performance‑based incentive compensation, which may include cash bonuses and/or long‑term incentives.

Benefits

Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support total well‑being. Eligibility varies based on full‑ or part‑time status, exempt or non‑exempt status, and management level.

Capital One will not sponsor a new applicant for employment authorization or provide immigration‑related support for this position.