Offensive Security, Purple Team Lead

Offensive Security, Purple Team Lead

At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors, who love to solve real problems and meet real customer needs. We want you to be curious and ask “what if?” Capital One started as an information strategy company that specialized in credit cards, and we have become one of the most impactful and disruptive players in the industry. 

The Offensive Security Purple Team at Capital One is a collaborative and innovative team that works to reduce cyber risk by proactively improving security posture. The team is composed of seasoned offensive and defensive cyber experts who work closely with tech and cyber partners to plan, coordinate, test, and report on defensive gaps and control weaknesses. 

The Purple Team Lead will be a highly experienced and knowledgeable cybersecurity professional who will play a pivotal role in enhancing the organization's overall cyber defense posture. This individual will not only lead and manage the Purple Team but also work collaboratively across various departments to identify and address security vulnerabilities, proactively improve detection and response capabilities, and ensure the continuous improvement of the enterprise's security controls.

The successful candidate for this position will be part of an exciting and dynamic environment to build and deliver industry leading cyber capabilities to continuously protect and defend Capital One’s brand, systems and data. Offensive Security is part of the Cyber Operations and Intelligence program and assists with identifying opportunities to enhance Capital One’s information security posture against a broad range of cyber threats, and develop strategies to most effectively address those threats.

Responsibilities:

• Developing and implementing a comprehensive Purple Team strategy that aligns with the organization's overall security objectives.

• Leading and coordinating Purple Team exercises that emulate real-world attack scenarios to assess the effectiveness of existing security controls and identify areas for improvement.

• Collaborating with Red and Blue Teams to facilitate knowledge sharing, improve communication, and enhance the overall effectiveness of the organization's security operations.

• Analyzing Purple Team exercise results and providing actionable insights to relevant stakeholders to drive remediation efforts and improve the organization's security posture.

• Staying abreast of emerging threats and attack techniques to ensure that the Purple Team's strategy and exercises remain relevant and effective.

• Providing mentorship and guidance to Purple Team members to foster professional development and enhance the team's overall capabilities.

• Clearly and effectively convey technical information and results to diverse audiences, including senior management and those without a technical background.

Basic Qualifications:

• High School Diploma, GED, or equivalent certification

• At least 6 years of operational cyber security experience

• At least 4 years of experience on a Hunt or Red team

• At least 3 years of People Management experience

• At least 2 years of experience with incident response, threat detection or security operations center processes and workflows

• At least 2 years of experience with security tools and SIEM platforms

• At least 2 years of experience with defensive or offensive security concepts, tools and methodologies

Preferred Qualifications:

• 4+ years of experience in developing offensive or defensive tools using scripted and compiled languages

• 3+ years of experience leading teams through all phases of security engagements

• 3+ years of experience with security event response

• OSCP, OSCE, GPEN, GXPN, CRTO, GCFA or GCIH certification

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital