Skip to main content
R123983 Posted 12/03/2021

Threat Modeling Operations Manager

McLean , Virginia | Richmond , Virginia
  • Category Cyber
  • Experience Manager
  • Primary Address McLean, Virginia


Center 2 (19050), United States of America, McLean, Virginia

Threat Modeling Operations Manager

Threat modeling is a framework for risk discovery and management and is the practice of examining software and systems to identify and eliminate insecure patterns as early as possible. Threat modeling ensures that software and systems continue to evolve securely as new features are added and the cyber threat landscape evolves. Threat models can be used to provide context and drive prioritization decisions across the software delivery lifecycle and the cyber security and risk management domain. 

The Enterprise Threat Modeling Program consists of an Operations team and a Tools Engineering Team. In this Threat Modeling Engineer role you will report to the Operations team lead, and you will develop and leverage your skills as a threat modeling subject matter expert. 

The Threat Modeling Operations team works to fully embed threat modeling into Capital One’s software delivery and risk management processes. Working in this team you will help establish threat modeling best practices, and evolve governance and education for those practices. This will require you to collaborate closely with the Information Security Office and Engineering teams to support the adoption of threat modeling. In order to support the adoption of threat modeling you will collaborate with the organization’s education team to provide training materials, and you will produce best practice whitepapers, blog posts and presentations that raise awareness of threat modeling.

You will be required to partner with other areas of the Cyber organization to develop processes for threat models to be consumed to inform and provide context for other Cyber processes (e.g. application security testing, alert and response playbook definitions, red team activities, risk assessments etc). You will work on initiatives to integrate threat modeling with risk management processes within Capital One. 

You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. 


  • Partner with the Information Security Office and Engineering to embed threat modeling into the software delivery lifecycle 

  • Develop and execute governance for threat modeling and provide reporting of compliance and adoption

  • Produce educational training materials, whitepapers and blog posts that support the adoption of threat modeling by associates across the business

  • Integrate threat modeling into organizational Risk Management practices

  • Partner with other functions in Cyber to enable those functions to consume threat models to drive greater value from threat modeling across Cyber

  • Evolve the practice of threat modeling in Capital One, and fully integrate threat modeling with Risk Management practices.

  • Support our customers in adopting and using the threat modeling tools we deliver for the business. Provide documentation to aid our customers in using those tools, and establish process and governance for the use of those tools.

  • Identify and implement process improvements for the work you deliver on through KPIs and OKRs.

  • Work with the customers and stakeholders of the threat modeling program, feedback on our work and strive to use that feedback to improve the delivery for the team and yourself.

  • Plan and deliver your work with the team through Agile and Scrum practices to provide visibility and transparency. 

  • Develop and execute data driven controls and reporting, and drive outcomes into the teams that need to take action.

  • Work with the Program leadership to present information and influence change at senior management level.

  • Grow the presence of Capital One in the threat modeling community across the industry.

Basic Qualifications

  • High School Diploma, GED, or equivalent certification

  • At least 4 years of Information Technology or Cybersecurity experience

  • At least 3 years of experience in a Security Operations or Risk or Process and Operations role

  • At least 2 years of experience with Cloud technologies (Amazon Web Services, Microsoft Azure, or Google Cloud Platform)

Preferred Qualifications

  • 1+ years of experience with Threat Modeling methodologies

  • 1+ years of experience with developing Standards and Procedures

  • 1+ years of experience with cyber risk frameworks (CIS-RAM, NIST)

  • 1+ years of experience with producing educational and training materials

  • 1+ years of experience in developing dashboards and performance reporting

  • 1+ years of experience utilizing Agile methodologies

  • 1+ years financial services industry experience

  • 1+ years experience in Offensive and/or Defensive Security techniques

  • Professional certifications (Certified Information Systems Security Professional (CISSP), AWS Cloud Practitioner, Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect, Certified Secure Software Engineer, GCDA, or GCIH)

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

No agencies please. Capital One is an Equal Opportunity Employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity/assignment, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Hiring Process
Career Journey

How We Hire

We take finding great coworkers pretty seriously.

Man On Laptop
  • Step 1 Apply

    It only takes a few minutes to complete our application and assessment.

  • Step 2 Screen and Schedule

    If your application is a good match you’ll hear from one of our recruiters to set up a screening interview.

  • Step 3 Interview(s)

    Now’s your chance to learn about the job, show us who you are, share why you would be a great addition to the team and determine if Capital One is the place for you.

  • Step 4 Decision

    The team will discuss — if it’s a good fit for us and you, we’ll make it official!

Employees Working

How to Pick the Perfect Career Opportunity

Overwhelmed by a tough career choice? Read these tips from Devon Rollins, Senior Director of Cyber Intelligence, to help you accept the right offer with confidence.

Your wellbeing is our priority

Our benefits and total compensation package is designed for the whole person. Caring for both you and your family.

  • Healthy Body, Healthy Mind

    You have options and we have the tools to help you decide which health plans best fit your needs.

  • Save Money, Make Money

    Secure your present, plan for your future and reduce expenses along the way.

  • Time, Family and Advice

    Options for your time, opportunities for your family, and advice along the way. It’s time to BeWell.

Career Journey

Here’s how the team fits together. We’re big on growth and knowing who and how coworkers can best support you.

Career Journey
Women on Cellphone

Want more jobs like this?

Set a Job Alert

Explore Your Options


  • Build the next generation of digital tools for our customers—we’re always innovating solutions.

    Explore 473 Jobs


  • Leverage technology in new and powerful ways to pioneer change, all in the pursuit of changing banking for good.

    Explore 562 Jobs

Customer Care

  • When our customers have questions about our products and services, they’ll turn to you.

    Explore 9 Jobs


  • Design and create future-forward products on a team of innovators helping to change banking for good.

    Explore 351 Jobs

Data Scientist

  • Write code and crunch numbers, all in pursuit of developing models that solve problems—and make us a better bank.

    Explore 68 Jobs


  • Use your tech skills to stop cyber threats and help make banking safe and secure for our customers.

    Explore 41 Jobs


  • Help us tell our story by creating memorable digital experiences for our customers through your creativity and ingenuity.

    Explore 103 Jobs

Branch Ambassador

  • Take your place on the front lines, representing our brand, problem solving and building relationships with the customers

    Explore 182 Jobs


  • Your outgoing personality and tech-savvy know-how can make all the difference for the customers that visit our cafés.

    Explore 24 Jobs


  • Use cutting-edge software, audit methodologies, and data science to help us make great business decisions.

    Explore 22 Jobs


  • Use your bold perspective and specialized skills to drive projects and implement financial strategies—challenging the way banking is done.

    Explore 85 Jobs

Commercial Banking

  • Deliver expert advice, superior products and best-in-class service to our commercial partners.

    Explore 38 Jobs

Business Banking

  • Your entrepreneurial mindset and expertise leads to one-of-a-kind service for every small business owner you assist.

    Explore 25 Jobs

Risk Management

  • Use your expertise and perspective to bring insights to the table so we can grow in the right ways.

    Explore 189 Jobs

Human Resources

  • Be on the frontlines of attracting, engaging and retaining top talent that’s helping us change banking for good.

    Explore 57 Jobs

Marketing and Communications

  • Help us tell our story, connect with customers and introduce our products and to the world.

    Explore 11 Jobs


  • Help us communicate how we’re changing banking for good, and ensure our brand is one of the most recognized in the industry.

    Explore 41 Jobs

Data Analyst

  • Analyze, develop and test the strategies that pull insights from our data and move us forward.

    Explore 24 Jobs

Business Analyst

  • Use your strategic and analytical skills to help solve major challenges and make both our business and banking, better.

    Explore 84 Jobs


  • Offer simple answers to complex questions, while helping both our team and customers thrive.

    Explore 95 Jobs


  • Move our innovations closer to reality by mitigating legal risk with your expertise and ability to advise on strategic business decisions.

    Explore 14 Jobs

Job Alerts

Don’t miss a thing. Stay in the know about opportunities you may be interested in!

Interested InSelect a job category from the list of options. Select a location from the list of options. Finally, click “Add” to create your job alert.

  • Cyber, McLean, Virginia, United StatesRemove
  • Cyber, Richmond, Virginia, United StatesRemove
  • Technology, McLean, Virginia, United StatesRemove
  • Technology, Richmond, Virginia, United StatesRemove

*Required Field