Cyber Security Product Lead – Network Defense

ITSMF; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One seeks a technical security product leader to deliver game-changing cybersecurity solutions aligned with threat data and design thinking. You will drive executive risk conversations and translate them into actionable roadmaps and security capabilities, partnering with engineering and operations to enable secure business outcomes.

You will guide risk-based decisions, stay ahead of industry threats, and lead cross-functional teams to build and scale security products that enhance

Qualifications

• Bachelor's Degree.
• 5+ years of experience in cybersecurity or information technology.
• 4+ years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
• 6+ years of experience with cloud based or on-prem network security services and products (WAF, Bot Management, DDoS Mitigation).
• 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
• 5+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 5+ years of experience working on teams and presenting to stakeholders cybersecurity information such as metrics, threat intelligence, controls and/or requirements.
• 4+ years of experience working in multi-cloud environments.
• 4+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys, or AWS Security Hub).
• 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Demonstrated familiarity with industry governance or financial governance processes.
• Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Develop and communicate a risk-based and data-driven strategy and outcome-driven roadmaps for enterprise security services, solutions, and capabilities, in partnership with engineering and operations partners, customers, and other stakeholders.
• Analyze and select alternatives based on threat, risk, desirability, feasibility, and viability.
• Keep abreast of advances in industry to address the threat landscape.
• Advise executive decision makers based on business and technology risk grounded in threat.
• Facilitate build vs. buy decisions to identify optimal strategies for addressing business and technology risks.
• Develop and lead RFI/RFPs to assess the market and/or procure effective cyber solutions.
• Lead product backlog grooming to refine cybersecurity and customer objectives, translate vision into detailed initiatives and epics featuring robust design details and clear acceptance criteria, and ensure requirements are well understood by the engineering teams.
• Maintain technical and risk credibility with your own team and with partners across the enterprise.
• Maintain close ties to various stakeholders, developers, and engineers across the company, ensuring the services we create meet their needs as products evolve.
• Iterate quickly and see the products through to production and scale.
• Establish product value propositions, metrics, and key indicators.
• Recruit, motivate, mentor, and lead those around you to be their best.

Job description

Capital One seeks a technical security product leader to deliver game-changing cybersecurity solutions aligned with threat data and design thinking. You will drive executive risk conversations and translate them into actionable roadmaps and security capabilities, partnering with engineering and operations to enable secure business outcomes.

You will guide risk-based decisions, stay ahead of industry threats, and lead cross-functional teams to build and scale security products that enhance