Detection Engineering Leader - AI-Driven Security

Capital One; New York (NY); On-site; USD 215,000 - 246,000; Full time

Benefits offered by this job

Performance based incentives

Competitive benefits

Job summary

Capital One is seeking a Detection Engineer Manager to lead AI-driven detection initiatives and build scalable, end-to-end endpoint coverage. You will guide DaC workflows, leverage GenAI-assisted tools, and partner with CSOC and threat intel to reduce risk across the enterprise.

The role requires deep expertise in detection engineering, ML applications to security, and strong leadership to mentor engineers and drive architectural decisions.

Qualifications

• Bachelor's degree required.
• Minimum 5 years in cybersecurity or IT.
• Minimum 4 years evaluating or supporting cybersecurity capabilities.
• Minimum 4 years working with endpoint logs (Windows Event Logs, Sysmon, EDR).
• Minimum 2 years with EDR platforms (CrowdStrike Falcon, SentinelOne, Microsoft Defender).
• Minimum 1 year with ML or data science applied to security.

Responsibilities

• AI-Driven Detection & Engineering: leverage ML to automate detection logic and accelerate development lifecycle.
• Detection-as-Code leadership: design, develop, and maintain detection rules using DaC and CI/CD.
• Behavioral Detection Engineering: build high-fidelity detections using signals and telemetry.
• Strategic Architecture: apply MITRE ATT&CK to prioritize coverage and guide decisions.
• Offensive Alignment & Threat Research: translate attacker techniques into detections and identify gaps.
• Endpoint Domain Ownership: own detection coverage from telemetry onboarding to alert deployment.

Skills

Cybersecurity

Threat Detection

Endpoint Security

Machine Learning

Python

EDR

Security Tools

Education

Bachelor's Degree

Tools

CrowdStrike Falcon

Splunk

Qualys

AWS Security Hub

Job description

Capital One is seeking a Detection Engineer Manager to lead AI-driven detection initiatives and build scalable, end-to-end endpoint coverage. You will guide DaC workflows, leverage GenAI-assisted tools, and partner with CSOC and threat intel to reduce risk across the enterprise.

The role requires deep expertise in detection engineering, ML applications to security, and strong leadership to mentor engineers and drive architectural decisions.