Manager, Offensive Security leading Capital One's Purple Team to enhance cyber defense posture. Collaborating across teams to address vulnerabilities and improve information security protocols.
Responsibilities
Lead "Defense Improvement Analysis" (DIA): Deconstruct adversary simulation activities to identify control gaps and document the full lifecycle, from initial discovery to final technical resolution.
Engineering & Analytics: Perform advanced analysis of log events using big data tools to identify, recommend, and engineer specific solutions for threat detection and response.
Strategic Collaboration: Serve as the technical bridge between offensive and defensive stakeholders, translating complex adversary TTPs into durable defense strategies and actionable recommendations for both technical and executive audiences.
Operational Research: Continuously research emerging threat behaviors and automate repetitive post-exploitation analysis tasks to scale the team’s ability to identify and address novel TTPs.
Infrastructure & Tooling: Build and maintain the technical infrastructure and lab environments required to support and evolve Purple Team activities.
Requirements
High School Diploma, GED, or equivalent certification.
At least 4 years of information security experience.
At least 3 years of experience in Threat Hunting or Detection Engineering within a cloud or hybrid environment.
At least 2 years of experience analyzing EDR telemetry and bypass techniques.
2+ years of experience performing offensive security operations.
2+ years experience with Databricks, Spark, or similar for security analytics.
4+ years of experience in log analysis, threat detection engineering, threat hunt, incident response, forensics.
4+ years of experience with scripting and compiled languages.
One or more of the following certifications: OSCP, OSCE, GPEN, GXPN, CRTO, GCFA, GCIH, OSTH, GDAT.
Benefits
Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Security Director overseeing lab services and operations, ensuring compliance and security across global sites. Leading teams and integrating secure strategies for innovation and productivity.
Security Product Owner at Dell Technologies responsible for Lab Services and Operations. Translate strategy into initiatives while collaborating with cross - functional leaders in security engineering and Agile delivery.
Security Shift Manager responsible for safety operations at WarHorse Gaming Omaha. Supervising security staff and ensuring compliance with laws and regulations.
Security Supervisor managing safety and loss prevention for WarHorse Gaming in Omaha. Ensures compliance and oversees the security department operations on the casino floor.
Security Architect leading AI trust and governance strategies for Fortune 500 with Salesforce. Empowering organizations with cutting - edge security solutions in a collaborative environment.
Information Security Manager responsible for ensuring security of data, systems, and networks at Cayuse. Leading development and monitoring of security policies, practices, and controls.
Cloud Security Architect at Cayuse overseeing secure architecture design, implementation, and governance for cloud - native, microservices, and AI - enabled systems. Collaborating with stakeholders to ensure compliance and security practices.
Cyber Security Engineer II safeguarding systems at MSK, involved with complex technologies in cancer care security. Lead threat investigations and apply technical knowledge for security improvements.
Cybersecurity Engineer at Verizon responsible for security lifecycle and effectiveness across networks. Leading incident response and vulnerability management in a hybrid work role.
Principal Security Engineer working on network security lifecycle and threat management for Verizon’s 4G/5G Cloud Networks. Collaborating with multiple teams to enhance cybersecurity posture.