Principal Associate, Cyber Security Logging

Capital One

. Assess needs, identify insights, and move actions forward with stakeholders to achieve targeted cybersecurity outcomes .

Posted 10/5/2026full-timeMcLean • Virginia • United StatesJuniorMid-Level💰 $147,100 - $184,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in evaluating and enhancing cybersecurity capabilities using frameworks like NIST CSF and MITRE ATT&CK, while effectively communicating insights and reports to both technical and executive audiences. Proficient in leveraging data from multiple streams to inform risk management and maturity assessments.

Highest-signal resume keywords

Cybersecurity FrameworksRisk Management ConceptsLinux, Unix, Windows Operating SystemsSecurity Tools (Splunk, Crowdstrike, Qualys)Public Cloud Environments (AWS, Azure, GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AnalysisCapability AssessmentData ArchitectureIncident AnalysisVulnerability AssessmentMetrics DevelopmentThreat IdentificationControl AssessmentData StreamingLog Production

Soft Skills

CollaborationCommunicationStakeholder EngagementProblem SolvingAnalytical Thinking

Tools & Technologies

SplunkCrowdstrikeQualysAWS Security HubMulti-Cloud Environments

Certifications & Qualifications

CISSPGIACCISMCCSPCISACRISCAWS SecurityAWS Advanced Networking SpecialtyAWS Solutions Architect Certification

Industry Keywords

NIST Cybersecurity FrameworkMITRE ATT&CKCMMCFedRAMPCyber ThreatsCyber VulnerabilitiesGovernance ProcessesMaturity AssessmentRisk Mitigation StrategiesData Logging Strategy

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxSplunkUnix

About the role

Key responsibilities & impact

Assess needs, identify insights, and move actions forward with stakeholders to achieve targeted cybersecurity outcomes
Evaluate cybersecurity capabilities, including determining effectiveness of capability implementation using the NIST Cybersecurity Framework
Collaborate with stakeholders, executives, and line-of-business partners to understand capabilities and maturation roadmaps and facilitate next steps
Leverage and enrich cybersecurity data from multiple data streams to produce insights and analysis
Monitor cyber capabilities and track progress toward maturity-state objectives
Improve program capabilities by interpreting technical issues and determining root causes of discovered weaknesses
Lead portions of capability or control assessments and document and communicate findings to stakeholders
Develop and deliver risk and maturity reports for executive and technical audiences, highlighting trends and emerging issues
Coordinate cross-team efforts to align cybersecurity governance, metrics, and reporting practices across multiple domains

Requirements

What you’ll need

Bachelor's Degree
At least 3 years of experience in cybersecurity or information technology
At least 2 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
At least 2 years of experience working with Linux, Unix and Windows operating systems
At least 1 year of experience with public cloud environments (AWS, Azure, GCP)
3+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc. (preferred)
3+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events (preferred)
2+ years of experience working in multi-cloud environments (preferred)
2+ years of experience using security tools such as Splunk, Crowdstrike, Qualys, or AWS Security Hub (preferred)
1+ years of experience developing or interpreting cybersecurity metrics or dashboards (preferred)
Demonstrated familiarity with industry governance or financial governance processes (preferred)
Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies (preferred)
Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders (preferred)
2+ years of experience in enterprise data or logging strategy, including defining schemas, configuring log production on applications, infrastructure, endpoints, data streaming, log consumption, and overall data architecture (preferred)
CISSP, GIAC, CISM, CCSP, CISA, CRISC, AWS Security, AWS Advanced Networking Specialty, or AWS Solutions Architect Certification (preferred)
New applicants must not require employer immigration support or sponsorship for employment authorization

Benefits

Comp & perks

Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial and other benefits supporting total well-being
Reasonable accommodations for applicants who require them