Lead Software Engineer, Data Protection

We are seeking a Full Stack Software Engineer who is passionate about building platforms at the intersection of cybersecurity, data engineering, and regulated software. As a Capital One Lead Software Engineer on the DLP Control Platform, you'll have the opportunity to be on the forefront of driving a major transformation in how Capital One protects sensitive data across every channel where information moves.

- Lead the design and build of platform services that centralize how data protection policies are authored, how findings are routed and scored, and how enforcement is applied across the DLP program, working in vertical slices that span schema, API, deployment automation, and production validation to create solutions that help meet regulatory needs for the company

- Share your passion for staying on top of tech trends, experimenting with and learning new technologies, participating in internal and external technology communities, mentoring other members of the engineering community , and contributing to architectural decisions on data modeling, service boundaries, event design, and operational strategy

- Collaborate with digital product managers, security partners, and DLP policy experts, and deliver robust cloud-based platform services that produce consistent, auditable outputs across vendors and channels and satisfy regulatory examination

- Utilize programming languages like Go, Python, TypeScript, and SQL, schema validation systems including CUE and JSON Schema, Open Source RDBMS and NoSQL databases (PostgreSQL/Aurora), Container Orchestration services including Docker and ECS Fargate, and a variety of AWS tools and services including Lambda, Step Functions, EventBridge, and CDK

- At least 4 years of experience in software engineering (Internship experience does not apply)

- At least 1 year experience with cloud computing (AWS, Microsoft Azure, Google Cloud)

- 7+ years of experience in at least one of the following: Python, Java, TypeScript, JavaScript, or SQL

- 3+ years of experience with AWS, GCP, Microsoft Azure, or another cloud service

- 2+ years of experience building production systems in cybersecurity, data protection, data engineering, or platform engineering in a regulated or security-sensitive environment

- 1+ years of experience with schema validation systems (CUE, JSON Schema, or equivalent constraint languages)

- 1+ years of experience designing and building event-driven architectures or pipeline systems

- 1+ years of experience with infrastructure as code (CDK, Terraform, or CloudFormation)

- 1+ years of experience programmatically implementing data protection or security controls: detection logic, classification systems, enforcement automation, or false positive reduction through code

- 1+ years of experience with shipping new platforms from inception to production

- 1+ years of experience accelerating development using AI coding agents (e.g., GitHub Copilot, Claude Code) and modern developer workflows

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).