Senior Manager, Security Engineer

Capital One Financial

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Richmond, VA
Salary
$209,000–$238,500 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $189k
This role $224k
$135k most similar roles pay here $250k

This role pays more than 79% of similar roles. Most pay $159,000–$218,275 — the shaded band above. At the midpoint, this role pays about $224k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 1743 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 947 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Senior Manager, Security Engineer

The Sr. Manager, Security Engineer joins the security organization to drive technical strategy for encryption, data protection, and cryptographic policy engineering. This role involves architecting scalable data protection solutions involving key management and tokenization platforms while designing advanced automation frameworks for continuous detection, compliance, and remediation. The individual will serve as a technical authority on emerging threats, translating risk intelligence into architectural blueprints and building DevSecOps solutions to secure enterprise platforms. Key responsibilities include mentoring senior engineers and collaborating with product teams to embed security by design. Required skills and technologies include experience with KMS, HSMs, tokenization engines, Infrastructure-as-Code tools like Terraform or CloudFormation, and CI/CD integration. The role also requires proficiency in programming languages such as Java, Python, or JavaScript to address systemic vulnerabilities across various business domains and infrastructure environments.

What you'll do

  • Drive technical strategy for encryption, data protection, and cryptographic policy engineering.
  • Architect scalable data protection solutions including key management and tokenization platforms.
  • Define and implement security reference architectures and reusable control patterns across business domains.
  • Design advanced automation frameworks for continuous detection, compliance, and remediation.
  • Embed security by design into core company platforms through partnership with product and infrastructure teams.
  • Resolve systemic vulnerabilities across enterprise environments.
  • Translate risk intelligence from emerging threats into architectural blueprints and proactive mitigations.
  • Mentor senior engineers to elevate technical excellence across the security organization.

What we're looking for

  • High School Diploma, GED, or equivalent certification.
  • At least 7 years of experience in cybersecurity or information technology.
  • At least 3 years of people leadership experience.
  • At least 3 years of experience delivering enterprise-scale security or infrastructure initiatives.
  • Bachelor's Degree (preferred).
  • 4+ years of experience building specialization and expertise in a focused discipline of cybersecurity (preferred).
  • 6+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing (preferred).
  • 7+ years of experience with data protection technologies such as KMS, HSMs, tokenization engines, and cryptographic policy management (preferred).
  • 8+ years of experience in cloud or infrastructure security engineering (preferred).
  • Experience leading enterprise-scale architecture or automation initiatives (preferred).
  • Hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation) and CI/CD integration (preferred).
  • One or more professional certifications such as CISSP, AWS Security Specialty, CIDPRO, or GIAC Cloud Security (preferred).
  • Experience in application security and software development in one or more programming languages like Java, Python, or JavaScript (preferred).

More like this

Similar roles

Senior Manager, Cyber Security

Capital One Financial

McLean, VA +3 11 days ago $229,900–$262,400
NIST CSF MITRE ATT&CK CMMC FedRAMP AWS Splunk Crowdstrike Qualys AWS Security Hub Multi-cloud Cybersecurity Governance Risk Management Threat Intelligence Data Analytics Incident Analysis
7+ yrs exp

Senior Manager, Cyber Security

Capital One Financial

McLean, VA +3 11 days ago $229,900–$262,400
Cybersecurity Risk Management NIST CSF MITRE ATT&CK CMMC FedRAMP Multi-cloud Splunk Crowdstrike Qualys AWS Security Hub Data Analytics Threat Intelligence Governance Compliance
7+ yrs exp

Security Engineer IV

Capital One Financial

Riverwoods, IL +1 3 days ago $197,300–$225,100
DevSecOps Python Terraform CloudFormation CI/CD Palo Alto Networks Panorama IAM Infrastructure as Code Vulnerability Management Network Security Cloud Security Forensics Serverless AWS
5+ yrs exp

Senior Security Engineer

CoStar Group

Arlington, VA +1 97 days ago $115,000–$203,000
AWS SaaS Security AI Security NGFW CASB SSE Python PowerShell Terraform Azure DevOps infrastructure-as-code SSO OAuth Network Security Threat Modeling Routing
5+ yrs exp

Senior Security Engineer

Early Warning Services

Scottsdale, AZ +3 4 days ago $132,000–$165,000
Vulnerability Management Endpoint Security DLP Linux Windows Python JavaScript PowerShell SSL/TLS Certificate Management Firewall Ruleset Design Packet Capture Networking Routing Layer 2 Layer 3 NAT CISSP CCNA CISA
5+ yrs exp Hybrid

Senior Manager, Security Engineering

Arctic Wolf

Remote 56 days ago $137,000–$222,000
Identity and Access Management Cloud Security Application Security Platform Security Security Systems Engineering SaaS Zero Trust NIST CSF NIST 800-53 ISO 27001 SOC 2 Automation System Integration Data Governance
Remote