> Markdown version of [/jobs/ext/2511799-enterprise-cyber-exercises-lead](https://www.wearedevelopers.com/jobs/ext/2511799-enterprise-cyber-exercises-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Enterprise Cyber Exercises Lead - **Company:** Capital One Financial Corporation - **Location:** McLean, VA, United States - **Experience:** Expert - **Salary:** $164,800.0 - $188,100.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, User-Centered Design, Mitre Att&ck, Information Technology, Cyber Warfare - **Published:** August 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=583c82971741a3be ## About the Role Capital One is seeking an experienced Cyber Exercise Practitioner to own the end-to-end design, coordination, execution, and evaluation of cyber exercises and postmortem services. This role is built for a practitioner who has earned their craft, someone who can independently lead high-stakes engagements across the full exercise lifecycle while contributing to the continuous maturation of the Enterprise Cyber Exercise Program., * High School Diploma or GED * At least 4 years of experience in cyber exercise design and facilitation * At least 4 years of experience in Cyber Operations, Governance and Risk, or Technology Risk Management within the financial services industry * At least 3 years of experience facilitating discussion-based tabletop exercises * At least 3 years of experience coordinating exercise activities with technical cybersecurity teams AND business line stakeholders * At least 3 years of experience managing client engagement lifecycles from initial scoping through after-action reporting * At least 2 years of experience analyzing exercise results to identify cyber control gaps and operational risk vulnerabilities * At least 2 years of experience authoring cyber exercise after-action reports and executive briefings * At least 1 year of experience applying Homeland Security Exercise and Evaluation Program (HSEEP), NIST Cybersecurity Framework (NIST CSF), OR MITRE ATT&CK frameworks Preferred Qualifications: * Bachelor's Degree in Cybersecurity, Information Technology, or Risk Management * 8+ years of experience in cyber exercise design and facilitation, including operations-based exercises, functional experiments, or full-scale simulations * 5+ years of experience delivering exercises to executive, VP+, or board-level audiences * 5+ years of experience briefing C-suite or executive stakeholders on technical cybersecurity risks * 5+ years of experience leading or supporting cyber event postmortem programs OR structured lessons learned processes * Working knowledge of AI tools and their application to exercise design, scenario development, or program operations * Active industry certifications including CISSP, CISM, CRISC, CBCP, or HSEEP At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization). ## Description The successful candidate will serve as a core member of the Enterprise Cyber Exercise Program (ECEP) team, taking full ownership of customer relationships and delivery quality across a portfolio of discussion and operations-based exercises, as well as Cyber Event Postmortem reviews. While their work will equip cyber responders, it will equally focus on partnering with our Lines of Business (LOBs) to simulate, analyze, and solve complex business problems that extend far beyond traditional security operations. By bridging the gap between technical threats and business strategy, they will directly strengthen Capital One's operational resilience and safeguard our core business functions.They will be expected to work fluidly across team roles, leading their own engagements, supporting peer exercise leads, and stepping into delivery support functions as needed, bringing a one-team mentality that prioritizes program success over individual lanes., * Own the full end-to-end delivery of the cyber exercise lifecycle, from initial customer engagement and scoping through planning, execution, and after-action reporting, with minimal delivery support. * Lead end-to-end delivery of Cyber Event Postmortems by guiding responders through lessons learned discussions following real-world events and producing formal reporting identifying key strengths and opportunities to continually mature how Capital One approaches cyber response. * Build and maintain independent customer relationships across Cyber, Tech, Risk, and Business stakeholders by managing expectations, driving alignment, and sustaining engagement throughout the delivery lifecycle. * Design and facilitate discussion-based exercises (tabletops, seminars, workshops) and support operations-based exercises across a range of audience levels, including senior leadership and cross-functional executive teams. * Contribute to the team the same way the team contributes to you by providing note-taking, documentation, exercise control, and delivery support on peer-led engagements, ensuring every exercise on the program is resourced to succeed. * Mentor junior associates and contract support through the exercise design and delivery process, helping build team capacity and sustain program quality standards. * Contribute to program strategy and roadmap discussions through bringing practitioner-level insight into scoping decisions, methodology improvements, and prioritization conversations. * Apply emerging AI tools and automation approaches to exercise design, inject development, scenario research, and post-exercise analysis to improve team efficiency and output quality. * Stay current on emerging cyber threats, regulatory reporting requirements across the organizational footprint, and exercise methodology trends to ensure Capital One's exercises remain rigorous and relevant. ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [10 Creative Workshop Ideas for Conferences](https://www.wearedevelopers.com/magazine/363-10-creative-workshop-ideas-for-conferences)