Senior Threat Detector

Primary Responsibilities

AI-Driven Detection & Engineering :
Leverage LLMs and machine learning to automate detection logic, summarize complex attack chains, and reduce false positives.

Detection-as-Code (DaC) :
Lead the design and maintenance of detection rules using DaC methodologies, utilizing GenAI assistants to accelerate development and unit testing.

Strategic Architecture :
Drive the integration of data science concepts into threat detection and utilize the MITRE ATT&CK framework to visualize and close coverage gaps.

Offensive Alignment & Hunting :
Conduct hypothesis-driven threat research and apply a deep understanding of Red Team methodologies to translate attacker TTPs into high-fidelity detections.

Stakeholder & Risk Management :
Partner with business leaders to ensure robust monitoring across cloud, network, and applications while ensuring all documentation meets strict fintech compliance and audit standards.

Mentorship : Serve as a technical bar-raiser, mentoring junior engineers on both traditional security concepts and emerging AI-driven workflows.

Ability to conduct proactive threat research across enterprise environments using hypothesis driven methodologies

Develop and implement best practices to identify malicious activity in a dynamic, fast-paced environment

Understand the business drivers of the enterprise and partner with relevant stakeholders to ensure robust monitoring and expanded coverage across our hosts, networks, and applications.

Demonstrate a deep understanding of adversary techniques and emerging threats that could impact business operations

Respond to inquiries from regulatory entities, risk management and audit teams, providing clear and complete documentation of procedures and workflows

Experience mentoring junior engineers and contribute to a culture of continuous improvement and knowledge sharing

Ability to articulate security risks and detection strategies to technical and executive audiences

Previous experience with a detection engineering, threat detection, or detection operations team

Extensive experience in SQL

Strong understanding of attacker TTPs, red team methodologies, and translating offensive security insights into detections

Excellent analytical, communication, and leadership skills

Must be able to perform root cause analysis independently or collaboratively with team

Customer service and stakeholder engagement skills

Strong decision-making and strategic thinking in threat detection

High School Diploma, GED, or equivalent certification

At least 3 years of experience in Information Technology or Cyber Security

At least 2 years of experience with host, cloud, application or network logs

At least 2 years of experience developing alerts for threat detection

At least 2 years of penetration testing or offensive security experience

Bachelor’s Degree in Information Technology, Cyber Security or Computer Science or similar programs

4+ years of experience in Threat Detection, Threat Hunting, or Security Engineering

4+ years of experience with data science concepts and techniques

4+ years of experience with Python

1+ years of experience in publishing code to Git Hub

GCIA, GCIH, CISSP, GMON, GREM, GCTD, MLE, OR Cloud (GCP, AWS) certifications

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA : $161,800 - $184,600 for Prin Assoc, Cyber Technical

Richmond, VA : $147,100 - $167,900 for Prin Assoc, Cyber Technical

Candidates hired to work in other…