Penetration Testing Lead & Cyber Security Manager

Capital One; New York (NY); Hybrid; USD 251,000 - 286,000; Full time

Job summary

Capital One is seeking a Senior Manager of Cyber Security (Penetration Testing) who will lead ethical hacking efforts across enterprise networks, services, applications, and infrastructure.

The role emphasizes building a comprehensive testing strategy, reporting actionable findings, and mentoring teams to advance capabilities while collaborating with software developers to improve CI/CD remediation practices.

Qualifications

• Bachelor's Degree in a relevant field.
• 7+ years of experience in cybersecurity or information technology.
• At least 3 years of experience in People Leadership.
• At least 4 years of experience in Penetration Testing.
• At least 2 years of experience with public cloud environments (AWS, Azure, GCP).
• At least 1 year of scripting experience (Python, Golang, or C#).

Responsibilities

• Leading and overseeing penetration testing of enterprise networks, services, applications, and infrastructure.
• Contributing to the development of a comprehensive penetration testing strategy aligned with security objectives.
• Analyzing results and providing actionable insights to drive remediation.
• Staying current on threats and techniques to keep the strategy relevant.
• Providing mentorship to foster professional development within the team.
• Collaborating with developers on remediation guidance throughout the CI/CD pipeline.
• Translating complex technical results for senior management and non-technical audiences.

Skills

Penetration Testing

People Leadership

Cloud environments

Python

Education

Bachelor's Degree

Job description

Capital One is seeking a Senior Manager of Cyber Security (Penetration Testing) who will lead ethical hacking efforts across enterprise networks, services, applications, and infrastructure.

The role emphasizes building a comprehensive testing strategy, reporting actionable findings, and mentoring teams to advance capabilities while collaborating with software developers to improve CI/CD remediation practices.