Cyber Fraud Intelligence Principal Associate

Description

Capital One is looking for a Principal Associate for our Cyber Fraud Intelligence team. As a Principal Cyber Fraud Intelligence Associate, you will play an integral role in protecting our customers, consumer-facing products and our brand.

Capital One’s Cyber Fraud Intelligence team counters cyber-enabled fraud across the Capital One ecosystem. We are looking for someone who is forward-thinking, with experience in performing complex investigations to combat cyber-enabled fraud.

You will leverage your skills to proactively identify cyber fraud trends and / or events impacting at-risk Capital One customers while partnering with a variety of product-specific fraud teams across the enterprise to mitigate the exposure.

We are looking for a candidate with excellent communication skills, to include writing for diverse audiences, formulating actionable intelligence products, and helping to shape Capital One’s cyber fraud response strategies.

The successful candidate for this position will be part of an exciting and dynamic environment and will have an active role in building processes to gather actionable cyber fraud intelligence.

Responsibilities :

Synthesize disparate sets of data from sources such as malware, cyber attack patterns, and closed and open-source intelligence to inform instrumentation and detections

Create mechanisms to combine multiple detection signals, which can automatically highlight cyber fraud threats to specific at-risk customer populations

Create and communicate actionable referrals of at-risk customer accounts through the research of common indicators of compromise and / or modus operandi

Monitor internal and external data sources while leveraging vendor resources to gather intelligence from deep and dark web, covert communication channels, social media platforms and other OSINT sources

Partner with Engineering, data science and product teams to produce automated solutions to fraud TTP’s

Basic Qualifications :

High School Diploma, GED or equivalent certification

At least 4 years of experience working in cybersecurity or information technology performing incident response, threat hunting, threat intelligence, forensics, or offensive security

At least 2 years of experience in conducting investigations into cyber-enabled fraud, cybercrime, or advanced persistent threats

At least 2 years of experience in fraud methodologies, technologies and trends in first & third party frauds including deposit, identity theft or account takeover

At least 2 years of experience building queries for relational databases to analyze complex data sets for cyber fraud indicators

Preferred Qualifications :

Bachelor's Degree

5+ years of experience in programming or scripting (Python, Perl, PHP, PowerShell)

5+ years of experience with cyber threat intelligence threat frameworks (the Lockheed Martin Cyber Kill Chain, Diamond Model, MITRE ATT&CK, Defense, Engage)

At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting.

Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

New York City (Hybrid On-Site) : $165,100 - $188,500 for Prin Assoc, Cyber Technical