Senior Cloud Security Engineer (DevSecOps)

Capital One; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One is seeking Security Engineers to design automated controls and cloud security architectures across cloud and on-prem environments. You will lead IAM, endpoint, network, and data protection solutions while developing automation for vulnerability management and compliance monitoring.

The role requires collaboration with software and infrastructure teams to embed security by design and to advance enterprise security technologies.

Qualifications

• 5+ years of experience in cybersecurity or information technology.
• 3+ years of experience working in a cloud-based environment.
• 2+ years of experience designing and implementing automated security solutions.

Responsibilities

• Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments.
• Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
• Develop advanced automation for vulnerability management, detection, and compliance monitoring.
• Serve as a technical advisor during complex incident response and forensics investigations.
• Partner with software, cloud and infrastructure teams to embed security by design into enterprise platforms.
• Evaluate and integrate new security technologies, ensuring interoperability and operational scalability.
• Influence and codify engineering standards, patterns, and reusable modules.
• Participate in ongoing support of security tools, including investigations, analysis and break fix.

Skills

Cloud security

IAM

Endpoint security

Network security

Data protection

Automation

Vulnerability management

Incident response

Security architecture

DevSecOps

Education

Bachelor’s Degree

Tools

Terraform

CloudFormation

CI/CD tools

Job description

Capital One is seeking Security Engineers to design automated controls and cloud security architectures across cloud and on-prem environments. You will lead IAM, endpoint, network, and data protection solutions while developing automation for vulnerability management and compliance monitoring.

The role requires collaboration with software and infrastructure teams to embed security by design and to advance enterprise security technologies.