Senior Manager, Cyber Security

Capital One Financial

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: McLean, VANew York, NYRichmond, VA
Salary: $229,900–$262,400 / yr
Employment: Full-time
Posted: 4 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $189k

This role $246k

$134k $276k

below market most similar roles pay here above market

This role pays more than 94% of similar roles. Most pay $162,037–$216,300 — the blue band above. At the midpoint, this role pays about $246k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 2107 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 1107 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Senior Manager, Cyber Security

Role Posting Log in to save

The Senior Manager, Cyber Security (Penetration Testing, People Leader) joins the Offensive Security team within the Cyber Operations and Intelligence program. This leadership role involves planning, coordinating, and executing sophisticated ethical hacking exercises to identify vulnerabilities across enterprise networks, services, applications, and infrastructure. You will lead penetration testing efforts, develop comprehensive security strategies, and provide actionable remediation guidance to developers throughout the Software CI/CD pipeline. The role requires expertise in public cloud environments including AWS, Azure, and GCP, along with scripting skills in Python, Golang, or C#. You will utilize threat modeling frameworks such as CVSS, MITRE ATT&CK, DREAD, and STRIDE to analyze results. Key responsibilities include mentoring team members, performing code reviews, and communicating technical findings to diverse audiences to improve the overall security posture.

Skills

Penetration Testing Offensive Security Python Golang C# AWS Azure GCP CI/CD Threat Modeling CVSS MITRE ATT&CK DREAD STRIDE Red Teaming Application Security Network Security Code Review OSCP OSWA OSWE OSCE3 GPEN GXPN CRTO

What you'll do

Lead and oversee penetration testing of enterprise networks, services, applications, and infrastructure.
Develop a comprehensive penetration testing strategy aligned with organizational security objectives.
Analyze testing results to provide actionable insights and remediation guidance to stakeholders.
Monitor emerging threats and attack techniques to keep security strategies relevant and effective.
Provide mentorship and guidance to team members to foster professional development.
Work with developers to provide remediation guidance and improvements throughout the CI/CD pipeline.
Communicate technical information and results clearly to senior management and non-technical audiences.

What we're looking for

At least 7 years of experience in cybersecurity or information technology.
At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
At least 3 years of experience in People Leadership.
At least 4 years of experience in Penetration Testing.
At least 2 years of experience with public cloud environments (AWS, Azure, GCP).
At least 1 year of experience scripting with Python, Golang, or C# (preferred).
8+ years of security testing experience, threat modeling, tool development, or specific certifications (preferred).
Bachelor's Degree.

Save