Endpoint Detection Engineering Lead

Capital One; Plano (TX); On-site; USD 179,000 - 205,000; Full time

Job summary

Capital One is hiring a Detection Engineer, Manager, to lead end-to-end endpoint detection across the CTD team. You will drive AI-assisted detection, DaC-rule development, and scalable EDR monitoring. You will mentor engineers, collaborate with CSOC and Threat Intelligence, and ensure compliance in a fintech environment.

The role emphasizes telemetry onboarding, alert tuning, and coverage-gap analysis under a Detection-as-Code framework using GitHub and CI/CD pipelines.

Qualifications

• High School Diploma or GED or equivalent
• At least 4 years in cybersecurity or IT
• At least 4 years of endpoint/host logs experience
• At least 2 years with EDR platforms
• At least 4 years developing threat detection alerts
• At least 2 years in offensive security or adversary emulation
• At least 1 year of ML/data science in security

Responsibilities

• Own end-to-end endpoint detection coverage from telemetry onboarding to alert deployment
• Lead detection rule design using Detection-as-Code and CI/CD pipelines
• Develop high-fidelity behavioral detections leveraging telemetry
• Apply MITRE ATT&CK to visualize and close coverage gaps
• Conduct threat research translating attacker techniques into detections
• Mentor engineers in security concepts and AI-driven workflows

Skills

Endpoint security

EDR

SQL

Python

ML security

Threat detection

Communication

Mentorship

Education

Bachelor's degree

High School Diploma

Tools

CrowdStrike Falcon

SentinelOne

Microsoft Defender

Job description

Capital One is hiring a Detection Engineer, Manager, to lead end-to-end endpoint detection across the CTD team. You will drive AI-assisted detection, DaC-rule development, and scalable EDR monitoring. You will mentor engineers, collaborate with CSOC and Threat Intelligence, and ensure compliance in a fintech environment.

The role emphasizes telemetry onboarding, alert tuning, and coverage-gap analysis under a Detection-as-Code framework using GitHub and CI/CD pipelines.