Threat Modeling Operations Manager
Company: Capital One
Location: Bowie
Posted on: May 12, 2022
Job Description:
Center 2 (19050), United States of America, McLean,
VirginiaThreat Modeling Operations ManagerThreat modeling is a
framework for risk discovery and management and is the practice of
examining software and systems to identify and eliminate insecure
patterns as early as possible. Threat modeling ensures that
software and systems continue to evolve securely as new features
are added and the cyber threat landscape evolves. Threat models can
be used to provide context and drive prioritization decisions
across the software delivery lifecycle and the cyber security and
risk management domain. -The Enterprise Threat Modeling Program
consists of an Operations team and a Tools Engineering Team. In
this Threat Modeling Engineer role you will report to the
Operations team lead, and you will develop and leverage your skills
as a threat modeling subject matter expert. -The Threat Modeling
Operations team works to fully embed threat modeling into Capital
One's software delivery and risk management processes. Working in
this team you will help establish threat modeling best practices,
and evolve governance and education for those practices. This will
require you to collaborate closely with the Information Security
Office and Engineering teams to support the adoption of threat
modeling. In order to support the adoption of threat modeling you
will collaborate with the organization's education team to provide
training materials, and you will produce best practice whitepapers,
blog posts and presentations that raise awareness of threat
modeling.You will be required to partner with other areas of the
Cyber organization to develop processes for threat models to be
consumed to inform and provide context for other Cyber processes
(e.g. application security testing, alert and response playbook
definitions, red team activities, risk assessments etc). You will
work on initiatives to integrate threat modeling with risk
management processes within Capital One. -You are pragmatic and
practical in your understanding of risk and security, but also
willing to know when to pull in experts and escalate. You
collaborate and innovate with other teams within Capital One to
push the envelope. -Responsibilities
- Partner with the Information Security Office and Engineering to
embed threat modeling into the software delivery lifecycle -
- Develop and execute governance for threat modeling and provide
reporting of compliance and adoption
- Produce educational training materials, whitepapers and blog
posts that support the adoption of threat modeling by associates
across the business
- Integrate threat modeling into organizational Risk Management
practices
- Partner with other functions in Cyber to enable those functions
to consume threat models to drive greater value from threat
modeling across Cyber
- Evolve the practice of threat modeling in Capital One, and
fully integrate threat modeling with Risk Management
practices.
- Support our customers in adopting and using the threat modeling
tools we deliver for the business. Provide documentation to aid our
customers in using those tools, and establish process and
governance for the use of those tools.
- Identify and implement process improvements for the work you
deliver on through KPIs and OKRs.
- Work with the customers and stakeholders of the threat modeling
program, feedback on our work and strive to use that feedback to
improve the delivery for the team and yourself.
- Plan and deliver your work with the team through Agile and
Scrum practices to provide visibility and transparency. -
- Develop and execute data driven controls and reporting, and
drive outcomes into the teams that need to take action.
- Work with the Program leadership to present information and
influence change at senior management level.
- Grow the presence of Capital One in the threat modeling
community across the industry.Basic Qualifications
- High School Diploma, GED, or equivalent certification
- At least 4 years of Information Technology or Cybersecurity
experience
- At least 3 years of experience in a Security Operations or Risk
or Process and Operations role
- At least 2 years of experience with Cloud technologies (Amazon
Web Services, Microsoft Azure, or Google Cloud Platform)Preferred
Qualifications
- 1+ years of experience with Threat Modeling methodologies
- 1+ years of experience with developing Standards and
Procedures
- 1+ years of experience with cyber risk frameworks (CIS-RAM,
NIST)
- 1+ years of experience with producing educational and training
materials
- 1+ years of experience in developing dashboards and performance
reporting
- 1+ years of experience utilizing Agile methodologies
- 1+ years financial services industry experience
- 1+ years experience in Offensive and/or Defensive Security
techniques
- Professional certifications (Certified Information Systems
Security Professional (CISSP), AWS Cloud Practitioner, Certified
Cloud Security Professional (CCSP), AWS Certified Solutions
Architect, Certified Secure Software Engineer, GCDA, or GCIH)At
this time, Capital One will not sponsor a new applicant for
employment authorization for this position.No agencies please.
Capital One is an Equal Opportunity Employer committed to diversity
and inclusion in the workplace. All qualified applicants will
receive consideration for employment without regard to sex, race,
color, age, national origin, religion, physical and mental
disability, genetic information, marital status, sexual
orientation, gender identity/assignment, citizenship, pregnancy or
maternity, protected veteran status, or any other status prohibited
by applicable national, federal, state or local law. Capital One
promotes a drug-free workplace. Capital One will consider for
employment qualified applicants with a criminal history in a manner
consistent with the requirements of applicable laws regarding
criminal background inquiries, including, to the extent applicable,
Article 23-A of the New York Correction Law; San Francisco,
California Police Code Article 49, Sections 4901-4920; New York
City's Fair Chance Act; Philadelphia's Fair Criminal Records
Screening Act; and other applicable federal, state, and local laws
and regulations regarding criminal background inquiries.If you have
visited our website in search of information on employment
opportunities or to apply for a position, and you require an
accommodation, please contact Capital One Recruiting at
1-800-304-9102 or via email at . All information you provide will
be kept confidential and will be used only to the extent required
to provide needed reasonable accommodations.For technical support
or questions about Capital One's recruiting process, please send an
email to Capital One does not provide, endorse nor guarantee and is
not liable for third-party products, services, educational tools or
other information available through this site.Capital One Financial
is made up of several different entities. Please note that any
position posted in Canada is for Capital One Canada, any position
posted in the United Kingdom is for Capital One Europe and any
position posted in the Philippines is for Capital One Philippines
Service Corp. (COPSSC).
Keywords: Capital One, Bowie , Threat Modeling Operations Manager, Executive , Bowie, Maryland
Didn't find what you're looking for? Search again!
Loading more jobs...