Senior Cloud Security & DevSecOps Consultant

Capital One; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Capital One is seeking an experienced Information Security professional to consult on initiatives, programs, and projects to enhance security across the Developer Experience line of business. You will act as a central security contact and coordinate proactive guidance spanning infrastructure security, resiliency, data security, network design, and access management.

You will be the expert on Capital One's security capabilities, collaborate with enterprise cyber teams and architects, and support

Qualifications

• High School Diploma, GED or equivalent certification.
• 6+ years in cybersecurity or information technology.
• 5+ years guiding cyber security concepts and risk assessments.
• Experience securing public cloud environments (AWS, GCP, Azure).
• Certifications such as CISSP, CISM, CISA; cloud certs like AWS Solutions Architect.

Responsibilities

• Act as a central Information Security point of contact for the Developer Experience line of business.
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management.
• Serve as an expert in Capital One's Information Security capabilities, solutions, policies, procedures and standards.
• Collaborating with enterprise cyber teams and tech architects in defining and driving the cyber architecture strategy for modern platforms.
• Support security architecture and implementation needs for technology modernization and DevSecOps efforts.
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes.
• Escalate and manage cyber security risk.
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment.
• Work with line of business leadership to anticipate objectives and needs to better serve the line of business.
• Support data validation and communications on impact of identified gaps and remediation actions to leadership.

Skills

Cybersecurity

Cloud security

Security architecture

Risk assessment

Threat modeling

Communication skills

DevSecOps

Education

Bachelor's Degree

High School Diploma or equivalent

Tools

ISO 27001

ITIL

COBIT

PCI DSS

NIST CSF

CISSP

CISM

CISA

AWS Solutions Architect

GCP/Azure certs

Job description

Capital One is seeking an experienced Information Security professional to consult on initiatives, programs, and projects to enhance security across the Developer Experience line of business. You will act as a central security contact and coordinate proactive guidance spanning infrastructure security, resiliency, data security, network design, and access management.

You will be the expert on Capital One's security capabilities, collaborate with enterprise cyber teams and architects, and support