Looking for a risk management specialist who specializes in demonstrated vendor risk management, can review what the risk is, has experience with third-party suppliers for cyber security control, GRC tools (even 1 year) to drive the assessments, vendor risk management in corporate America, can work in a fast-paced environment, good communication skills, they will be interfacing people across the globe.

Within the Cyber Fusion Center, the Offensive Security Team continuously evaluates PepsiCo’s cyber security posture through penetration tests and red team engagements to proactively identify gaps and drive mitigations to minimize PepsiCo's cyber risk exposure.

Capital One’s Offensive Security Purple Team reduces cyber risk by uncovering vulnerabilities and weaknesses in the enterprise cyber environment by conducting covert/overt adversary simulation and emulation.

Conduct reviews of cybersecurity information papers and plans with CYBERCOM, ARCYBER, Air National Guard Cyber, National Security Agency (NSA), Federal Bureau of Investigations (FBI), Department of Justice (DOJ), and Department of Homeland Security (DHS.

Provide subject matter expertise for cyber defenders, remediation teams and enterprise technology teams. San Francisco, California (Hybrid On-Site): $213,400 - $243,500 for Manager, Cyber Technical.

New York City (Hybrid On-Site): $201,400 - $229,900 for Manager, Cyber Technical. Offensive Security is part of the Cyber Operations and Intelligence program and assists with identifying opportunities to enhance Capital One’s information security posture against a broad range of cyber threats, and develop strategies to most effectively address the threats.

This position works closely with offensive and defensive partner teams to plan, coordinate, execute and report on detection gaps and control weaknesses to improve cyber defense across the enterprise.

One or more of the following certifications (OSCP, OSCE, GPEN, GXPN, CRTO, GCFA, GCIH) At least 4 years of experience performing covert red team operations. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI.

Lead sophisticated covert adversary simulation activities against Capital One to enable identification and mitigation of identified vulnerabilities. At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors, who love to solve real problems and meet real customer needs.

At least 4 years of experience in malware development and EDR evasion. Build and maintain technical infrastructure to support Purple team activity. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC.

Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law.

Lead Offensive Security Operator, Purple Team. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. Research, develop, and apply offensive tactics, techniques and procedures (TTPs) in order to effectively mimic the capabilities of relevant threat actors.

At this time, Capital One will not sponsor a new applicant for employment authorization for this position. For technical support or questions about Capital One's recruiting process, please send an email to.

The minimum and maximum full-time annual salaries for this role are listed below, by location. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Research, develop and document TTPs and share related knowledge with other members of the team.