Address
Form of workAbout This Role
In Cyber at Capital One, we do things at a fast pace in a CI/CD environment. We’re not a normal financial services company, constrained by a fixed mindset and legacy systems. We’re an agile business that dreams big and has the resources to deliver big and we were the first major bank to go all in on AWS.
As well as agility, Capital One is a company that puts customers at the centre of everything we do, how we operate, and how we protect. Their security is our responsibility and we guard the trust that our customers put in us on a 24/7 basis. Our Config Compliance team is responsible for maintaining hardening standards, assessing security posture, and processing the findings of hundreds of thousands of assets in the Enterprise covering Servers, Databases, Endpoint Devices, Network Equipment, and more, across Public Cloud and On Premise environments.
As a Senior Cyber Engineer you will work as part of the Security Testing organisation supporting the Config Compliance programme that protects Capital One and its customers in the US, UK and Canada. As a member of the team, you will maintain a high bar for the security of our environment, looking to automate as much as possible and drive efficient working practices as the evolution of our programme continues.
What You’ll Do
Deliver, optimise and support our Config Compliance programme, which underpins the overall security of Capital One’s global business.
Bring ideas, and solutions to improve the scale and efficacy of the programme to leadership.
Mentor and grow junior members of the team through direct support and modelled behaviours.
Handle stakeholder facing elements of the role with high standards of customer service.
Be part of an On-Call rota covering our systems 24x7 (approx 1 week in 10).
Demonstrate technical proficiency in the work you produce.
Maintain a risk based approach to day to day work.
Work collaboratively from the UK with teams across multiple time zones.
What We’re Looking For
Ideally we’d like someone who covers all of the following areas, but we’d love to hear from you if you’re experience only covers some of them:
Strong experience across Cloud, Cyber Security, DevOps, and Data.
Well versed in DevOps concepts, Infrastructure as Code, and automated deployment of infrastructure solutions.
Experience with security posture assessment tooling such as Qualys.
Experience with handling, processing, and analysing large volumes of data using SQL or Python, would be advantageous.
Strong scripting and automation skills in various languages, such as Python, BASH, or similar.
Extensive hands-on experience building in the Cloud (AWS - preferred / Azure / GCP).
Solid understanding of risk management principles. (A Cyber qualification is a bonus i.e CISSP, CISM)
A team player, who is self driven with excellent communication skills with a desire to share and teach amongst peers.
Someone who is driven to navigate the Enterprise to find the best outcomes.
What You’ll Get To Learn
Setting and assessing security configuration of hundreds of thousands of assets.
Hands-on experience in Amazon Web Services.
A range of industry leading tooling, such as GitHub, Artifactory, Jenkins, Hashicorp Vault etc.
Solving Enterprise scale problems.
Delivering work for multiple stakeholders.
Managing security and technology in a regulated environment.
What it takes to build and own systems at Enterprise scale.
Where and how you'll work
This is a permanent position and can be based in our London headoffice.
Our hybrid working model offers you the flexibility to work from our offices and from home, when you need to.
We're big on collaboration and connection, and so generally encourage our associates to use our offices on Tuesdays, Wednesdays and Thursdays.
The number of days you spend in the office will usually be led by the type of work you’re doing, and the hybrid working patterns of the people you partner most closely with.
Many of our associates have flexible working arrangements, and we're open to talking about an arrangement that works for you.
What’s in it for you
Bring us all this - and you’ll be well rewarded with a role contributing to the roadmap of an organisation committed to transformation
We offer high performers strong and diverse career progression, investing heavily in developing great people through our Capital One University training programmes (and appropriate external providers)
Immediate access to our core benefits including pension scheme, bonus, generous holiday entitlement and private medical insurance – with flexible benefits available including season-ticket loans, cycle to work scheme and enhanced parental leave
Open-plan workspaces and accessible facilities designed to inspire and support you. Our Nottingham head-office has a fully-serviced gym, subsidised restaurant, mindfulness and music rooms. In London, you can heighten your mood with a run on our rooftop running track or an espresso at the Workshop Coffee café
What you should know about how we recruit
We pride ourselves on hiring the best people, not the same people. Building diverse and inclusive teams is the right thing to do and the smart thing to do. We want to work with top talent: whoever you are, whatever you look like, wherever you come from. We know it’s about what you do, not just what you say. That’s why we make our recruitment process fair and accessible. And we offer benefits that attract people at all ages and stages.
We also partner with organisations including the Women in Finance and Race At Work Charters, Stonewall and upReach to find people from every walk of life and help them thrive with us. We have a whole host of internal networks and support groups you could be involved in, to name a few:
REACH – Race Equality and Culture Heritage group focuses on representation, retention and engagement for associates from minority ethnic groups and allies
OutFront – to provide LGBTQ+ support for all associates
Mind Your Mind – signposting support and promoting positive mental wellbeing for all
Women in Tech – promoting an inclusive environment in tech
EmpowHER - network of female associates and allies focusing on developing future leaders, particularly for female talent in our industry
If you require a reasonable adjustment, please contact [email protected] All information will be kept confidential and will only be used for the purpose of applying a reasonable adjustment.
For technical support or questions about Capital One's recruiting process, please send an email to [email protected]
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
