Lead Software Engineer, Data Protection

Capital One Capital One · Banking · McLean, VA +3

Lead Software Engineer focused on building platform services for data protection, policy authoring, and enforcement within a regulated environment. The role involves designing and implementing cloud-based services, collaborating with various stakeholders, and ensuring compliance with regulatory needs. While AI coding agents are mentioned as a tool, the core function is not AI/ML model development.

What you'd actually do

  1. Lead the design and build of platform services that centralize how data protection policies are authored, how findings are routed and scored, and how enforcement is applied across the DLP program, working in vertical slices that span schema, API, deployment automation, and production validation to create solutions that help meet regulatory needs for the company
  2. Share your passion for staying on top of tech trends, experimenting with and learning new technologies, participating in internal and external technology communities, mentoring other members of the engineering community, and contributing to architectural decisions on data modeling, service boundaries, event design, and operational strategy
  3. Collaborate with digital product managers, security partners, and DLP policy experts, and deliver robust cloud-based platform services that produce consistent, auditable outputs across vendors and channels and satisfy regulatory examination
  4. Utilize programming languages like Go, Python, TypeScript, and SQL, schema validation systems including CUE and JSON Schema, Open Source RDBMS and NoSQL databases (PostgreSQL/Aurora), Container Orchestration services including Docker and ECS Fargate, and a variety of AWS tools and services including Lambda, Step Functions, EventBridge, and CDK

Skills

Required

  • Bachelor's Degree
  • 4 years of experience in software engineering
  • 1 year experience with cloud computing (AWS, Microsoft Azure, Google Cloud)

Nice to have

  • Master's Degree
  • 7+ years of experience in at least one of the following: Python, Java, TypeScript, JavaScript, or SQL
  • 3+ years of experience with AWS, GCP, Microsoft Azure, or another cloud service
  • 4+ years of experience in open source frameworks
  • 2+ years of experience in Agile practices
  • 2+ years of experience building production systems in cybersecurity, data protection, data engineering, or platform engineering in a regulated or security-sensitive environment
  • 1+ years of experience with schema validation systems (CUE, JSON Schema, or equivalent constraint languages)
  • 1+ years of experience designing and building event-driven architectures or pipeline systems
  • 1+ years of experience with infrastructure as code (CDK, Terraform, or CloudFormation)
  • 1+ years of experience programmatically implementing data protection or security controls: detection logic, classification systems, enforcement automation, or false positive reduction through code
  • 1+ years of experience with shipping new platforms from inception to production
  • 1+ years of experience accelerating development using AI coding agents (e.g., GitHub Copilot, Claude Code) and modern developer workflows
  • AWS or security certifications

What the JD emphasized

  • building production systems in cybersecurity, data protection, data engineering, or platform engineering in a regulated or security-sensitive environment
  • shipping new platforms from inception to production
  • regulatory needs
  • satisfy regulatory examination