Job Description

Plano 3 (31063), United States of America, Plano, Texas

Sr. Manager, Product Security Consultant - AWS Architecture

Senior Manager, Security Consultant

Capital One is a diversified bank that offers a broad array of financial products and services to consumers, small business and commercial clients. We nurture a work environment where people with a variety of thoughts, ideas and backgrounds, guided by our shared values, come together to make Capital One a great company and a great place to work.

Security is essential to what we do at Capital One, from protecting our customers to our associates. As part of the Information Security Officer team for a line of business, you are passionate about security and risk management. You see security as an enabler and differentiator to enable the business through innovation, not a step in the compliance process. You work with the business to understand their goals and objectives and help them meet those goals and objectives in a secure manner with a heavy forward lean on modern Public Cloud Services, Containers, and DevOps. At Capital One, you will help consult on initiatives, programs, and projects to raise their game in Information Security and Risk Management. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You collaborate and innovate with other security groups within Capital One to push the envelope.

You are comfortable with modern technologies and patterns like Cloud Services, Containers, Microservices, Serverless, APIs, DevOps, Immutable Infrastructure and micro-segmentation.

Responsibilities:

* Execute information security advisory services as part of a multi-year data transformation strategy within cloud-based environments

* Act as a central point of contact for your line of business to the rest of Capital Ones Information Security and Risk Management Organizations

* Collaborate with a team of Information Security Consultants to provide subject matter expertise to project teams

* Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, User Access Management, and Supply Chain Assurance

* Serve as an expert in Capital Ones Information Security offerings, policies, procedures and standards

* Influence customers to leverage security offerings earlier in the development process and escalate to management when you have concerns

* Provide ad hoc support on special Information Security hot topics for the business

* Work with leadership to anticipate their objectives and needs to better serve them

* Drive innovation activity as an outcome; Partner extensively with the Security Engineering organization to derive both novel and patent activity as outcomes from research and development or from security engagements

About You:

* You have a desire to work in a very fast moving, forward leaning, modern computing environment

* You have a deep passion for securing modern computing platforms

* You have a strong desire to continually learn about new technologies

* You are a strong conceptual thinker

* You can work well under minimal supervision

* You have team-oriented interpersonal skills and the ability to interface effectively with a broad range of people, roles, and levels of management

* You have strong written and verbal communication skills

* You maintain calmness and clarity of thought under pressure and demonstrate the ability to maintain confidentiality

* You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives

Basic Qualifications:

* High School Diploma, GED, or equivalent certification

* At least 7 years of experience providing guidance and oversight of Security concepts

* At least 5 years of experience performing security risk assessments and security architecture reviews

* At least 5 years of experience with Architecture, software design, networking and Cloud infrastructure

Preferred Qualifications:

* Experience in securing a public cloud environment (e.g. AWS, GCP, Azure)

* Experience building software utilizing public cloud (e.g. AWS, GCP, Azure)

* Experience utilizing Agile methodologies

* Experience designing secure Software Architecture

* Experience with Application Security

* Experience with Threat Modeling

* Experience with Penetration Testing or Vulnerability Management

* Enterprise Monitoring experience

* Experience in Offensive or Defensive Security techniques

* Financial services industry experience

* Professional certification, such as a Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect or equivalent

At this time Capital One will not sponsor a new applicant for employment authorization for this position