Apply on Employer Site

Capital One · 1 month ago

Lead Cybersecurity Engineer, Threat Detection & Analytics

New York, NY

Full-time

Onsite

Mid, Senior Level

$176K/yr - $201K/yr

4+ years exp

Capital One is seeking a Lead Cybersecurity Engineer for their Threat Detection & Analytics team. The role focuses on creating high-quality detection logic and telemetry for the Security Operations Center (SOC), employing a risk-based approach to enhance cyber defense strategies.

BankingCredit CardsFinanceFinancial Services

Comp. & Benefits

No H1B

Responsibilities

Analyzing data from a variety of sources (network, endpoint, application, etc.) and contributing to the full-lifecycle development of our cyber defense strategy

Creating detection logic, models, tooling, and frameworks to help our SOC analysts detect potential cyber incidents

Utilizing behavioral analytics technologies (e.g., UEBA) to better analyze and understand the full picture of user and entity behavior

Participating in threat modeling sessions with other teams to identify and defend against adversary Tactics, Techniques and Procedures (TTPs)

Leveraging automation platforms (e.g., SOAR) to improve incident identification and response times

Onboarding and normalization of telemetry to enhance our Security Information and Event Management System (SIEM)

Tuning detection capabilities and tooling to eliminate noise

Collaborating with Offensive Security teams to analyze and evaluate security monitoring effectiveness

Partnering with other engineering and security teams to improve our detection capabilities across the organization

Leading design discussions, code reviews, and paired programming sessions

Qualification

Cybersecurity experienceBig data experienceAWS cloud securitySIEM experienceScripting in PythonScripting in PowerShellExperience in SplunkUser/entity behavioral analyticsAnalytical skillsCollaboration skillsLeadership skills