> Markdown version of [/jobs/ext/3554127-sr-manager-security-engineer](https://www.wearedevelopers.com/jobs/ext/3554127-sr-manager-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Manager, Security Engineer - **Company:** Capital One Financial Corporation - **Location:** Richmond, VA, United States - **Experience:** Expert - **Salary:** $209,000.0 - $238,500.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Amazon Web Services, Cloud Computing, Cloud Computing Security, Continuous Integration, Python (Programming Language), Key Management, Software Engineering, Tokenization, Software Security, Cloudformation, Infrastructure Automation Frameworks, Information Technology, Terraform, Devsecops, Serverless Computing, Programming Languages - **Published:** October 2, 2026 - **Apply:** https://www.capitalonecareers.com/job/richmond/sr-manager-security-engineer/1732/101404679248 ## About the Role * High School Diploma, GED or Equivalent Certification * At least 7 years of experience in cybersecurity or information technology * At least 3 years of people leadership experience * At least 3 years of experience delivering enterprise-scale security or infrastructure initiatives, * Bachelor's Degree * 4+ years of experience building specialization and expertise in a focused discipline of cybersecurity * 6+ years of experience with CI/CD security integration, infrastructure as code, or serverless computing * 7+ years of experience with data protection technologies such as KMS, HSMs, tokenization engines, and cryptographic policy management * 8+ years of experience in cloud or infrastructure security engineering * Experience leading enterprise-scale architecture or automation initiatives * Hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation) and CI/CD integration * One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO or GIAC Cloud Security * Experience in application security and software development in one or more programming languages such as Java, Python, JavaScript, etc. At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (e.g. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, and O-1, or any other forms of work authorization that require immigration support from an employer). ## Description Do you love building and pioneering in the technology space? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and iterative delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors who love to solve real problems and meet real customer needs. We are seeking a Security Leader who is passionate about building automated controls, cloud security architecture, and DevSecOps solutions to join our team. As a Security Engineer, you'll have the opportunity to be on the forefront of driving major technical transformations and securing enterprise platforms across Capital One. What You'll Do: * Serve as a trusted advisor driving the technical strategy for encryption, data protection, and cryptographic policy engineering * Architect scalable data protection solutions spanning multiple cryptographic disciplines, key management, and tokenization platforms * Define and lead implementation of security reference architectures and reusable control patterns across multiple business domains * Design advanced automation frameworks for continuous detection, compliance and remediation * Partner with platform, data and product engineering teams to embed security into core company platforms and capabilities * Drive resolution of systemic vulnerabilities across environments * Influence engineering standards and roadmaps through thought leadership and cross-domain collaboration * Mentor senior engineers and elevate technical excellence across the broader security organization * Partner with software, cloud and infrastructure teams to embed security by design into enterprise platforms * Serve as the technical authority for emerging threats, translating risk intelligence into architectural blueprints and proactive mitigations ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [When Value Becomes Programmable: A Developer's Guide to Tokenization](https://www.wearedevelopers.com/videos/100276-when-value-becomes-programmable-a-developer-s-guide-to-tokenization) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)