Manager, Cyber Threat Researcher, Cyber Intelligence (remote Eligible)

Capital One Capital One · Banking · McLean, VA +4 · Remote

This role focuses on leveraging cyber threat intelligence to counter, disrupt, and mitigate cyber adversaries targeting Capital One. The Cyber Threat Researcher will apply systems thinking and engineering techniques to emulate, detect, and predict threats. Responsibilities include connecting data signals to highlight threats, maintaining expertise in the threat landscape, synthesizing data from various sources, building relationships with internal teams, and communicating findings to leadership. Basic qualifications include experience in cybersecurity, incident response, threat hunting, threat intelligence, forensics, offensive security, cyber-enabled fraud, and programming/scripting. Preferred qualifications include a Bachelor's degree, more extensive experience in cybersecurity, cloud environments, and a highly regulated industry, with a mention of experience with Generative and Agentic AI tools.

What you'd actually do

  1. Create mechanisms to "connect the dots" between different spaces in order to combine signals in data that automatically highlight cyber threats across fraud and advanced enterprise threat activities
  2. Maintain industry-wide expertise of the current cyber threat landscape and attack vectors
  3. Synthesize disparate sets of data from sources such as malware, cyber attack patterns, closed and open-source intelligence to inform instrumentation, detections, and threat narratives such as storyboards
  4. Build productive relationships with internal teams to contextualize, influence and inform Capital One’s business units on emerging threats
  5. Communicate investigative outcomes with technical architecture context and conclusions to a variety of audiences, including company senior leadership and business partners

Skills

Required

  • High School Diploma, GED or equivalent certification
  • At least 4 years of experience working in cybersecurity or information technology
  • At least 4 years of experience performing incident response, threat hunting, threat intelligence, forensics, or offensive security
  • At least 3 years of experience in conducting investigations into cyber-enabled fraud, cybercrime, or advanced persistent threats
  • At least 2 years of experience in programming or scripting (Python, Perl, PHP, PowerShell)

Nice to have

  • Bachelor's Degree
  • 6 + years of experience working in cybersecurity or information technology
  • 6 + years of experience performing incident response, threat hunting, threat intelligence, forensics, or offensive security
  • 3+ years of experience with public cloud environments (AWS, Azure, GCP)
  • 3+ years of experience in a highly regulated industry (financial sector, financial technology, healthcare, or intelligence community)
  • 1+ year of experience working with Generative and Agentic AI tools

What the JD emphasized

  • highly regulated industry (financial sector, financial technology, healthcare, or intelligence community)