Mainframe Security Engineer

As a Mainframe Security Engineer you will:

• Optimize cybersecurity program processes and output.

• Contribute to the broader program roadmap.

• Drive reporting accuracy and demand excellence in department deliverables.

• Actively manage and escalate risk and customer-impacting issues within the day-to-day role to management.

• Manage and execute cybersecurity risk assessments using qualitative and quantitative methodologies to support the organizations overall security posture.

• Maintain an awareness of emerging cybersecurity threats by analyzing and reporting on cybersecurity risk against various Cybersecurity Frameworks (NIST CSF NIST 800-53 PCI DSS).

• Perform in-depth analysis of security issues and vulnerabilities using tools including WhiteHat Veracode and Qualys to ensure compliance with audit regulatory and legal requirements.

• Design metrics and develop advanced capabilities to ensure confidentiality integrity availability authentication and non-repudiation to communicate elevated risk in a business friendly manner to Cybersecurity Leadership and 2nd line partners.

• Proactively identify and report control deficiencies as issues within action plans.

• Conduct strategic and operational effectiveness assessments as required for cyber events and regulatory and audit reviews.

• Utilize ServiceNow and Cyber Risk System for risk management and risk remediation processing potential security exceptions and/or risk acceptances against established security policies and standards.

• Gather and challenge data evidence or statuses for accuracy to achieve initiative and risk mitigation completion.

Basic Qualifications:

• High School Diploma GED or equivalent certification

• At least 3 years of experience working in cybersecurity or information technology

• At least 3 years of experience in Mainframe Security Risk Assessment & Remediation

Preferred Qualifications:

• Bachelors Degree

• 6 years in Identity and Access Management

• 4 years of experience in RACF Administration (z/OS 2.1 and above)

• 4 years of experience issuing RACF and Top Secret Commands & Diagnostic Expertise

• 4 years of Privilege Access Management (CyberArk SailPoint IIQ)

• GIAC

• CISSP
  

At this time Capital One will not sponsor a new applicant for employment authorization or offer any immigration related support for this position (i.e. H1B F-1 OPT F-1 STEM OPT F-1 CPT J-1 TN or another type of work authorization).