Senior Cloud Security Engineer (IAM & DevSecOps)

Capital One National Association; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One seeks a Security Engineer 4 to design and deliver scales of security platforms across cloud and on-prem environments from McLean, VA. You will lead automated controls, implement IAM and data protection systems, and drive security by design across Capital One’s enterprise platforms.

The role emphasizes hands-on automation, vulnerability management, and collaboration with software and infrastructure teams. A strong background in CI/CD security and IaC is preferred.

Qualifications

• 5+ years in cybersecurity or IT
• 3+ years in a cloud environment
• 2+ years designing automated security solutions
• Experience with CI/CD security integration or IaC
• Professional certs like CISSP or cloud security specialty are a plus

Responsibilities

• Lead design and delivery of platforms and automated controls across cloud and on-prem
• Architect and implement IAM, endpoint, network and data protection systems
• Develop automation for vulnerability management, detection and compliance monitoring
• Serve as technical advisor during incident response and forensics investigations
• Partner with software, cloud and infra teams to embed security by design
• Evaluate new security technologies for interoperability and scalability
• Influence engineering standards and reusable modules
• Support security tools investigations and break-fix activities

Skills

Cloud security

Automation

DevSecOps

Python

Incident response

Education

Bachelor’s Degree

Tools

Terraform

CloudFormation

Palo Alto NGFW

Palo Alto Panorama

Job description

Capital One seeks a Security Engineer 4 to design and deliver scales of security platforms across cloud and on-prem environments from McLean, VA. You will lead automated controls, implement IAM and data protection systems, and drive security by design across Capital One’s enterprise platforms.

The role emphasizes hands-on automation, vulnerability management, and collaboration with software and infrastructure teams. A strong background in CI/CD security and IaC is preferred.