Principal Associate, Penetration Tester

4 weeks ago

New York, United States Capital One Full time
Center 3 (19075), United States of America, McLean, Virginia

Principal Associate, Penetration Tester

Capital One Offensive Security reduces cyber risk by uncovering vulnerabilities and weaknesses in the enterprise cyber environment through coordinated ethical hacking and penetration testing scenarios. This position works closely with team members to plan, coordinate, execute and report on sophisticated ethical hacking exercises, to identify cyber vulnerabilities and reduce the risk posture of enterprise systems. This role will be primarily responsible for performing application and network security assessments and will make recommendations to management on effective countermeasures.

The successful candidate for this position will be part of an exciting and dynamic environment to build and deliver industry leading ethical hacking capabilities to continuously protect and defend Capital One brand, systems and data. Offensive Security is part of the Cyber Operations and Intelligence program and assists with identifying opportunities to enhance Capital One's information security posture against a broad range of cyber threats, and develop strategies to most effectively address the threats.

Primary responsibilities for this position include:
  • Perform penetration testing of APIs, web applications, networks, and cloud services, as well as related applications and infrastructure.
  • Assess Capital One's development practices and help drive corporate security standards.
  • Help triage and test application responsible disclosure findings and newly disclosed vulnerabilities.
  • Work with developers to improve the Software Development Lifecycle (SDLC) for applications.


Basic Qualifications:
  • High School Diploma, GED or equivalent certification
  • At least 4 years of experience working in cybersecurity or information technology
  • At least 3 years of Penetration Testing experience
  • At least 1 year of experience with public cloud environments (AWS, Azure, Google Cloud Platform)


Preferred Qualifications:
  • Bachelor's Degree
  • 5+ years of security testing experience (red teaming, cloud security, application security, or network security)
  • 5+ years of experience with threat modeling concepts and frameworks (CVSS, MITRE ATT&CK, DREAD, or STRIDE)
  • Penetration testing experience with Internet of Things (IoT) devices, mobile applications, or code review.
  • Development experience with common scripting/programming languages such as Python, Golang, and C#.


At this time, Capital One will not sponsor a new applicant for employment authorization for this position.

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

New York City (Hybrid On-Site): $165,100 - $188,500 for Prin Assoc, Cyber Technical

San Francisco and San Jose, California (Hybrid On-Site): $174,900 - $199,700 for Prin Assoc, Cyber Technical

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

  • Senior Penetration Tester

    3 months ago

    New Orleans, United States ExecRecruitment Full time

    Job DescriptionJob DescriptionExecRecruitment is a global professional services provider and contingency staffing company. Our main objective is to source top talent and support professional growth.One of our direct clients is actively seeking a Senior Penetration Tester to join their team.Job Title: Senior Penetration TesterLocation: RemoteDuration: 6...

  • Embedded Security Tester

    2 months ago

    New York, United States Iceberg Cyber Security Full time

    I’m currently representing an upcoming leader in cybersecurity, providing cutting-edge solutions and testing services. Their current mission is to venture into the world of hardware and embedded testing and they are looking for a leader to join as a principal Embedded Security Tester and develop new offensive security offerings.As an Embedded Security...

  • Lead Penetration Tester

    5 days ago

    New York, New York, United States WithSecure Full time

    About the RoleWe are seeking a highly skilled and experienced Senior Cybersecurity Consultant to join our team at WithSecure. As a key member of our team, you will be responsible for leading penetration tests and security assessments, as well as representing the company in key client relationships.Key ResponsibilitiesLead penetration tests and security...

  • Hardware Security Consultant

    2 months ago

    New York, United States Iceberg Cyber Security Full time

    I’m currently representing an upcoming leader in cybersecurity, providing cutting-edge solutions and testing services. Their current mission is to venture into the world of hardware and embedded testing and they are looking for a leader to join as a principal Embedded Security Tester and develop new offensive security offerings.As an Embedded Security...

  • Associate Principal Software Engineer

    2 months ago

    New York, New York, United States Rockstar Games Full time

    Rare Opportunity at Rockstar Games: Associate Principal Software EngineerReady to take your career to the next level? Rockstar Games, known for creating top-notch entertainment experiences, is looking for an experienced Associate Principal Software Engineer to join their Online Services Auth & Identity team at Rockstar NYC. If you're passionate about games...

  • Principal Percussion

    1 week ago

    New York, United States New York City Ballet Full time

    The audition is for two positions. The Principal Percussion position includes duties in assigning parts and well as coordinating pit moves and setups with tech staff.

  • Cybersecurity Pen Tester

    3 months ago

    New Brighton, United States TÜV SÜD America Full time

    Job DescriptionJob DescriptionPosition Summary:This position is responsible for focusing domain areas of expertise as well as a good breadth of experience across Application Penetration Testing, Thick Client Penetration Testing, Web Application Penetration Testing, Mobile Application Penetration Testing (iOS and Android), Medical IoT devices Penetration...

  • Principal Fellow

    3 months ago

    New York, United States Uncommon Schools Full time

    Job DescriptionJob DescriptionCompany Descriptionproviding an outstanding K-12 education in historically under-resourced communities. We have proudly built schools that reflect our student population, with more than 60% of our teachers and staff across our network identifying as a person of color. Uncommon currently manages 53 schools serving 19,000 students...

  • Seasonal Task Associate

    1 week ago

    New York, United States Ulta Beauty Full time

    Ulta Beauty - 188 E 86th St [Retail Sales / Team Member] As a Task Associate at Ulta Beauty, you'll: Ensure all tasks are executed as planned and product is available for purchase; Ensure assigned work area is replenished, signed, and faced; Maintain outstanding store standards and overall store cleanliness; Complete merchandise resets, planograms, marketing...

  • Retail Associate

    3 months ago

    New York, United States Fifth Wall Full time

    **Retail Associate** at **b8ta** We are seeking experienced retail sales staff, aka b8ta testers, who are great communicators and born technophiles to work full-time in our retail location in New York City. Our ideal candidate is excited about technology and emerging consumer hardware trends and would consider him or herself an early adopter. Were looking...

  • Principal Administrative Associate

    2 weeks ago

    New York, United States City of New York Full time

    Job Description *** IMPORTANT NOTE: Only those currently serving as a permanent or probable permanent Principal Administrative Associate will be considered*** The NYC Department of Environmental Protection (DEP) enriches the environment and protects public health for all New Yorkers by providing 1.1 billion gallons of high quality drinking water, managing...

  • Director of Hardware Security

    1 month ago

    New York, United States AGS Cyber Full time

    ClientA fortune 500 global professional services leader who specialise in helping their clients shape business decision for the better.RoleWe are looking for a highly skilled and experienced Director to build, lead, and grow the newly established Hardware Security service line. This pivotal role involves building a new service line from the ground up,...

  • Controls Tester

    2 weeks ago

    New Castle, United States Rose International Full time

    •*Only qualified Controls Tester candidates located in Tampa, FL Or New Castle, Delaware areas will be considered due to the position requiring an onsite presence***Education: Bachelor''s/University degree, Master''s degree preferred.Qualifications: 6-10 years of experience. MS Excel, MS Access, SAS, SQL, Visual Basic a plus. 5+ years’ experience in...

  • Controls Tester

    2 weeks ago

    New Castle, United States Rose International Full time

    •*Only qualified Controls Tester candidates located in Tampa, FL Or New Castle, Delaware areas will be considered due to the position requiring an onsite presence***Education: Bachelor''s/University degree, Master''s degree preferred.Qualifications: 6-10 years of experience. MS Excel, MS Access, SAS, SQL, Visual Basic a plus. 5+ years’...

  • Principal Mechanical Engineer

    4 weeks ago

    New York, United States Talent Masters Full time

    About the job Principal Mechanical Engineer About Us:At Talent Masters, we're all about connecting engineering professionals with organizations that value their skills and prioritize employee satisfaction. We exclusively partner with organizations that create inclusive, employee-focused cultures where employees can thrive! The Job: Principal Mechanical...

  • Manager, Principal Giving East

    2 months ago

    New York, United States International Rescue Committee Full time

    The International Rescue Committee (IRC) responds to the world’s worst humanitarian crises, helping to restore health, safety, education, economic wellbeing, and power to people devastated by conflict and disaster. Founded in 1933 at the call of Albert Einstein, the IRC is one of the world's largest international humanitarian non-governmental...

  • Principal Mechanical Engineer

    2 months ago

    New York, United States MetaOption LLC Full time

    Principal Mechanical EngineerSkills: Management, Leadership, HVAC, Revit, CFD, PE, MEP building systems, LEED AP accreditation, Building Codes, EnergyExperience level: Director Education level: Bachelor's degree Relocation assistance: NoHybrid work: At least 2 days a week in officeAre you a visionary Mechanical Engineer with a passion for innovation and a...

  • Geotechnical Principal

    4 months ago

    York, United States ECS Corporate Services, LLC Full time

    May also include mentoring Associate Principals Responsibilities may also include participation in the review committee for candidates who seek Associate Principal designation (Geotechnical) Perform the following at the office and regional levels: Ov Technical, Principal, Project, Business Services

  • Tester I

    2 weeks ago

    New Bern, United States BSH Home Appliances USA Full time

    Tester I (2nd Shift) While meeting time standards, perform testing operations for cooking. These operations may require the use of various hand tools, test equipment, a calculator and computer. Job Functions: Test a variety of cooking appliances using a Hi-pot and Functional test station. Use hand tools to perform minor repairs to the cooking...

  • Manager, Principal Giving East

    1 month ago

    New York, New York, United States International Rescue Committee Full time

    The International Rescue Committee (IRC) responds to the world's worst humanitarian crises, helping to restore health, safety, education, economic wellbeing, and power to people devastated by conflict and disaster. Founded in 1933 at the call of Albert Einstein, the IRC is one of the world's largest international humanitarian non-governmental organizations...