Offensive Security Lead, Penetration Testing

Capital One; Richmond (VA); Hybrid; USD 230,000 - 262,000; Full time

Job summary

Capital One Offensive Security seeks a seasoned leader to drive penetration testing across enterprise networks, services, applications, and infrastructure. You will develop strategy, analyze findings, and provide actionable remediation guidance to elevate our security posture.

Mentoring junior staff and coordinating with development teams in the CI/CD process are key responsibilities. The role requires strong leadership, extensive pentesting experience, cloud proficiency (AWS/Azure/GCP), and

Qualifications

• Bachelor's degree required.
• 7+ years in cybersecurity/IT.
• 6+ years evaluating or developing cybersecurity capabilities.
• 3+ years in people leadership.
• 4+ years in penetration testing.
• 2+ years with public cloud environments (AWS/Azure/GCP).
• 1+ year scripting with Python, Golang, or C#.

Responsibilities

• Leading and overseeing penetration testing of enterprise networks, services, applications, and infrastructure.
• Developing a comprehensive penetration testing strategy aligned with security objectives.
• Analyzing testing results and providing actionable insights to drive remediation.
• Staying up-to-date with threats and attack techniques to keep strategy relevant.
• Mentoring team members and fostering professional development.
• Collaborating with developers on remediation within the CI/CD pipeline.
• Communicating technical results clearly to senior management.

Skills

Team leadership

Penetration testing

Communication

Education

Bachelor's Degree

Tools

AWS

Azure

GCP

Job description

Capital One Offensive Security seeks a seasoned leader to drive penetration testing across enterprise networks, services, applications, and infrastructure. You will develop strategy, analyze findings, and provide actionable remediation guidance to elevate our security posture.

Mentoring junior staff and coordinating with development teams in the CI/CD process are key responsibilities. The role requires strong leadership, extensive pentesting experience, cloud proficiency (AWS/Azure/GCP), and