Apply on Employer Site

Capital One · 8 hours ago

Senior Threat Detection Engineer

Deerfield, IL

Full-time

Onsite

Mid, Senior Level

$144K/yr - $165K/yr

3+ years exp

Capital One is seeking a Senior Threat Detection Engineer to join their Threat Detection & Analytics team. The role involves creating detection logic and telemetry for the Security Operations Center while employing a risk-based approach to security detection.

BankingCredit CardsFinanceFinancial Services

Comp. & Benefits

No H1B

Responsibilities

Analyzing data from a variety of sources (network, endpoint, application, etc.) and contributing to the full-lifecycle development of our cyber defense strategy

Creating detection logic, models, tooling, and frameworks to help our SOC analysts detect potential cyber incidents

Utilizing behavioral analytics technologies (e.g., UEBA) to better analyze and understand the full picture of user and entity behavior

Participating in threat modeling sessions with other teams to identify and defend against adversary Tactics, Techniques and Procedures (TTPs)

Leveraging automation platforms (e.g., SOAR) to improve incident identification and response times

Onboarding and normalization of telemetry to enhance our Security Information and Event Management System (SIEM)

Tuning detection capabilities and tooling to eliminate noise

Collaborating with Offensive Security teams to analyze and evaluate security monitoring effectiveness

Partnering with other engineering and security teams to improve our detection capabilities across the organization

Leading design discussions, code reviews, and paired programming sessions

Qualification

Cybersecurity experienceBig data experienceAWS cloud securitySIEM experienceScripting in PythonScripting in PowerShellExperience in SplunkUser/entity behavioral analyticsAnalytical skillsCollaboration skillsProblem-solving skills