Sr. Manager, Cyber Threat Researcher, Cyber Intelligence (Remote-Eligible)

Center 3 (19075), United States of America, McLean, Virginia

Sr. Manager, Cyber Threat Researcher, Cyber Intelligence (Remote-Eligible)

The mission of Capital One’s Cyber Intelligence is to leverage cyber threat intelligence for good. The team’s mission is to counter, disrupt and mitigate cyber adversaries targeting Capital One customers, associates, infrastructure and brand. We are looking for a Cyber Threat Researcher who is able to apply systems thinking and engineering techniques to accurately emulate, detect, and predict cyber threats and adversary intentions.

You have a growth mindset when it comes to maintaining expertise and knowledge in threat adversary trends and technologies. We are looking for someone who takes a forward leaning, innovative approach to problem solving, with passion for solving problems at Capital One scale and the desire to collaborate across functional teams.

Responsibilities:

• Create mechanisms to "connects the dots" between different spaces in order to combine multiple detection signals that automatically highlight cyber threats across fraud and advanced threat activities

• Maintain industry-wide expertise of the current cyber threat landscape and attack vectors

• Synthesize disparate sets of data from sources such as malware, cyber attack patterns, closed and open-source intelligence to inform instrumentation and detections

• Build productive relationships with internal teams to contextualize, influence and inform across Capital One’s business

• Communicate investigative outcomes and conclusions to a variety of audiences, including company senior leadership and business partners

Capital One is open to hiring a Remote Employee for this opportunity.Basic Qualifications:

• High School Diploma, GED or equivalent certification

• At least 8 years of experience working in cybersecurity or information technology performing incident response, threat hunting, threat intelligence, forensics, or offensive security

• At least 5 years of experience in conducting investigations into cyber-enabled fraud, cybercrime, or advanced persistent threats

• At least 3 years of experience with cyber threat intelligence threat frameworks (the Lockheed Martin Cyber Kill Chain, Diamond Model, MITRE ATT&CK, Defense, Engage)

• At least 3 years of experience in programming or scripting (Python, Perl, PHP, PowerShell)

Preferred Qualifications:

• Bachelor's Degree

• 3+ years of experience with public cloud environments (AWS, Azure, GCP)

• 3+ years of experience in a highly regulated industry (financial sector, financial technology healthcare, ICS, technology)