Detection Engineer Manager

Capital One Financial

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VARichmond, VANew York, NYPlano, TX
Employment
Full-time
Posted
51 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $208k
$157k $256k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $170,487–$246,287.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 2204 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 1138 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Detection Engineer Manager

Role Posting Log in to save

JOB TITLE: Detection Engineer, Manager The Detection Engineer, Manager joins the Cyber Threat Detection team as an Individual Contributor to own end-to-end detection coverage for the endpoint domain. This role involves identifying coverage gaps, onboarding telemetry, and deploying high-fidelity alerts to protect enterprise assets. You will build behavioral detections to identify adversary TTPs and utilize Detection-as-Code methodologies to manage YAML-based rules within GitHub CI/CD pipelines. Key responsibilities include leveraging LLMs and machine learning for automated detection logic, performing root cause analysis, and conducting hypothesis-driven threat research. Required skills include expertise in EDR platforms like CrowdStrike Falcon, SentinelOne, or Microsoft Defender, along with proficiency in SQL, Python, and data science concepts. You will use the MITRE ATT&CK framework to prioritize security gaps and mentor engineers on emerging AI-driven workflows.

Skills

EDR Python SQL SIEM CI/CD GitHub YAML Databricks Apache Spark Machine Learning MITRE ATT&CK CrowdStrike Falcon SentinelOne Microsoft Defender Windows Event Logs Sysmon Linux macOS Detection-as-Code

What you'll do

  • Own end-to-end detection coverage for the endpoint threat surface from telemetry onboarding to alert deployment.
  • Design and build high-fidelity behavioral detections to identify adversary TTPs and anomalous endpoint activity.
  • Lead the development and maintenance of detection rules using Detection-as-Code methodologies and CI/CD pipelines.
  • Leverage LLMs and machine learning to automate detection logic and reduce false positives.
  • Use the MITRE ATT&CK framework to identify, prioritize, and close endpoint coverage gaps.
  • Conduct hypothesis-driven threat research by translating Red Team methodologies into proactive detections.
  • Mentor engineers on security concepts, AI-driven workflows, and detection engineering best practices.
  • Ensure all detection documentation meets strict fintech compliance and audit standards.

What we're looking for

  • High School Diploma, GED, or equivalent certification.
  • At least 4 years of experience working in cybersecurity or information technology.
  • At least 4 years of experience with endpoint and host logs including Windows Event Logs, Sysmon, and EDR telemetry.
  • At least 2 years of experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender.
  • At least 4 years of experience developing alerts for threat detection.
  • At least 2 years of experience with penetration testing, offensive security, or adversary emulation.
  • At least 1 year of experience with machine learning or data science applied to security.
  • Bachelor's Degree (preferred).

Related searches

More Detection Engineer jobs Detection Engineer jobs in McLean All jobs at Capital One Financial

More like this

Similar roles

Detection Engineer Manager, Cyber Security

Capital One Financial

McLean, VA +3 32 days ago
Python LLMs Machine Learning Detection-as-Code CI/CD MITRE ATT&CK CrowdStrike Falcon SentinelOne Microsoft Defender Splunk AWS GCP EDR Sysmon Windows Event Logs NIST CSF Anomaly Detection Behavioral Analytics Malware Triage Red Team Methodologies
5+ yrs exp
Save

Detection Engineer

S&P Global

New York, NY 5 days ago $140,000–$155,000
Python PowerShell Bash SQL SPL KQL Splunk Microsoft Sentinel QRadar CrowdStrike SentinelOne Microsoft Defender AWS Azure Google Cloud Git GitLab Azure DevOps CI/CD MITRE ATT&CK Detection-as-Code
5+ yrs exp
Save

Senior Security Engineer, Detection Engineering

Nvidia

Remote (CA) +2 52 days ago
Splunk Microsoft Sentinel Defender CrowdStrike Python SQL KQL SPL Git CI/CD Kubernetes Detection-as-Code SIEM Threat Hunting Incident Response Cloud Security Identity Telemetry Endpoint Data
8+ yrs exp Remote
Save

Senior Detection Engineer

DoorDash, Inc

Remote 72 days ago $159,800–$235,000
Detection Engineering Python Go SQL SPL KQL Snowflake Google SecOps Cortex MITRE ATT&CK D3FEND Detection-as-Code Threat Intelligence Risk-based Analytics Distributed Systems
7+ yrs exp Remote
Save

Lead Detection Engineer, Cyber Defense & Response

Prudential Financial

Newark, NJ 40 days ago
Splunk Enterprise Security SPL KQL Python SOAR CI/CD MITRE ATT&CK Cyber Kill Chain Incident Response Threat Hunting Cyber Threat Intelligence Digital Forensics Windows Linux macOS Security Automation Telemetry Pipelines
Save