Security Engineer 4 (Manager) (CaCe)

The Security Engineer 4 (Manager) role at Capital One focuses on designing and delivering technology platforms and automated controls across cloud and on-prem environments. This position includes architecture and implementation of IAM, endpoint, network, and data protection capabilities, along with automation for vulnerability management and compliance monitoring, plus technical guidance during complex incident response and forensics.

Key Responsibilities

• Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments
• Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems
• Develop advanced automation for vulnerability management, detection, and compliance monitoring
• Serve as a technical advisor during complex incident response and forensics investigations
• Partner with software, cloud, and infrastructure teams to embed security by design into enterprise platforms
• Evaluate and integrate new security technologies, ensuring interoperability and operational scalability
• Influence and codify engineering standards, patterns, and reusable modules
• Participate in ongoing support of security tools, including investigations, analysis, and break-fix work

Required Qualifications

• High School Diploma, GED or Equivalent Certification
• At least 5 years of experience in cybersecurity or information technology
• At least 3 years of experience working in a cloud-based environment
• At least 2 years of experience designing and implementing automated security solutions

Preferred Qualifications

• Bachelor’s Degree
• 3+ years of experience building specialization and expertise in a focused discipline of cybersecurity
• 4+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing
• 5+ years of experience with security tools such as IAM, endpoint, vulnerability management, or network security technologies
• 6+ years of experience in cloud or infrastructure security engineering
• Experience leading enterprise-scale architecture or automation initiatives
• One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO, or GIAC Cloud Security
• Experience in application security and software development in one or more programming languages such as Java, Python, and JavaScript
• Hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation) and CI/CD integration

Technologies

• IAM
• Terraform
• CloudFormation
• CI/CD
• Serverless computing
• Java
• Python
• JavaScript

Hybrid Work Expectations

This role is designated as a hybrid position. You are expected to adhere to Capital One’s hybrid policy regarding required on-site presence at your designated office location.

Salary and Incentives

McLean, VA: USD 197,300 - 225,100 per year for Security Engineer 4.

Salary ranges may vary by location. Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. Additional location ranges listed include:

• Plano, TX: $179,400 - $204,700 for Security Engineer 4
• Richmond, VA: $179,400 - $204,700 for Security Engineer 4

This role is eligible to earn performance-based incentive compensation, which may include cash bonus(es) and/or long-term incentives (LTI). Incentives could be discretionary or non-discretionary depending on the plan.

Employment Authorization and Immigration Support

• H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, and O-1, or any other forms of work authorization that require immigration support from an employer.

Entity Notes for International Postings

Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe, and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).