Center 3 (19075), United States of America, McLean, Virginia

Manager, Active Defense Analyst, Cyber Intelligence

Capital One is looking for a Manager for the Cyber Active Defense team, a part of our Cyber Intelligence organization.

As a Manager, you will lead a team that plays an integral role in protecting our customers, our associates, and our brand. The team leverages a variety of disparate unique data sources to identify cyber adversary trends, tactics, and anomalous activity. We are looking for someone who is forward thinking, with experience producing actionable intelligence to mitigate cyber threats to include brand impersonations and phishing, in collaboration across the enterprise.

You are adaptable and thrive working cross-functionally, adept at producing intelligence to support business requirements, and proactively identify areas for implementation of cyber defense measures. You are a People Leader leveraging capacity planning skills which help achieve a sustainable pace for the team. You navigate through ambiguity; knowing when to move forward with problem-solving, and when to escalate issues to senior management. You understand compelling stories that inform decision-making and strategic planning utilize metrics, trends, and data. You will guide and support the team keeping abreast of emerging technologies and trends to drive innovation.

• Conduct quality assessments and reviews on cyber intelligence products and cases.
• Monitor, collect and report on suspicious or anomalous activity, threat intelligence reporting, security events and incidents
• Communicating, both written and verbal, cyber adversary trends and the impact to Capital One's consumer products and defenses
• Work collaboratively across cyber intelligence, operations and security testing teams.
• Monitor external data sources (e.g. cyber defense vendor sites, Computer Emergency Response Teams), to maintain currency of cyber threat conditions.

• High School Diploma, GED or Equivalent Certification
• At least 5 years of experience producing intelligence to combat cyber threats or conducting investigations into cybercrime, or advanced persistent threats
• At least 5 years of experience in evaluating cyber adversaries, technical indicators of compromise (IOCs), and cyber tactics, techniques and procedures (TTPs)

• 5+ years of experience with vendors and external resources used to collect cyber intelligence in the financial services space
• 5+ years of experience collecting against intelligence requirements and applying intelligence cycle principles to cyber threat analysis
• 2+ years of experience with cloud concepts and resources (AWS, Azure, Google Cloud Platform)
• 2+ years of people leadership experience