Endpoint Detection Engineering Manager

Capital One; New York (NY); On-site; USD 215,000 - 246,000; Full time

Job summary

Capital One is seeking an experienced Detection Engineer to own end-to-end Endpoint detection coverage and lead the development of high-fidelity detections. You will work across telemetry onboarding, alert deployment, and coverage gap analysis in collaboration with the CSOC.

The role requires deep expertise in endpoint security, EDR platforms, and data-driven detection methods, with a focus on translating attacker techniques into reliable detections.

Qualifications

• Deep expertise in endpoint security and telemetry analysis.
• Experience building threat detections for endpoint surfaces.
• Strong ability to translate attacker techniques into detections.
• Familiarity with SQL for large-scale data queries.
• Experience applying ML or analytics to security use cases.

Responsibilities

• Own end-to-end endpoint detection coverage across telemetry onboarding and alert deployment.
• Lead detection rule development using Detection-as-Code and CI/CD workflows.
• Develop high-fidelity behavioral detections with MITRE ATT&CK alignment.
• Collaborate with CSOC, Threat Intelligence, and Hunt teams on monitoring.

Skills

Endpoint security

EDR

SQL

Python

ML / data science

Education

Bachelor's Degree

Tools

CrowdStrike Falcon

SentinelOne

Microsoft Defender

GitHub CI/CD

Job description

Capital One is seeking an experienced Detection Engineer to own end-to-end Endpoint detection coverage and lead the development of high-fidelity detections. You will work across telemetry onboarding, alert deployment, and coverage gap analysis in collaboration with the CSOC.

The role requires deep expertise in endpoint security, EDR platforms, and data-driven detection methods, with a focus on translating attacker techniques into reliable detections.