Senior information Security Engineer

Wells Fargo is hiring a Senior Information Security Engineer to support the Cyber Threat Fusion Center within Technology as part of Cybersecurity.

Responsibilities

• Lead or participate in computer security incident response for moderately complex events
• Perform technical investigations of security incidents and complete post incident digital forensics to identify root causes and recommend mitigation
• Provide security consulting for medium-scope internal client projects to support alignment with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue-resolution recommendations for moderately complex security solutions across:
  • Networking
  • Cryptography
  • Cloud
  • Authentication and directory services
  • Email
  • Internet
  • Applications
  • Endpoint security
• Review and correlate security logs
• Apply security best practices and industry subject matter expertise to implement components of information security including:
  • Availability, integrity, and confidentiality
  • Risk management
  • Threat identification and modeling
  • Monitoring and incident response
  • Access management
  • Business continuity
• Identify vulnerabilities and security issues; conduct risk assessments and evaluate remediation alternatives
• Collaborate with peers and colleagues, and coordinate with managers to resolve issues and achieve goals
• Use AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Validate and integrate AI-assisted outputs using strong technical judgment
• Account for model limitations, security risks, and operational considerations when using AI
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of:
  • Work experience
  • Training
  • Military experience
  • Education

Technology

• GitHub Copilot
• Azure
• Office 365
• Cloud technologies
• Endpoint Detection and Response (EDR) product(s)
• Security Information and Event Management (SIEM)
• Security Orchestration, Automation and Response (SOAR) product(s)
• GCP
• AWS
• AI-assisted development and analysis tools
• Approved code-centric agents

Desired Qualifications

• 3+ years experience with Endpoint Detection and Response (EDR) product(s)
• 3+ years experience with Incident Response Protocols and Tools
• 3+ years experience with SIEM and Security Orchestration, Automation and Response (SOAR) product(s)
• 1+ years experience with Azure, Office 365, or Cloud technologies
• Knowledge and understanding of security analytics, including incident response and digital forensics
• Knowledge and understanding of data security controls, including:
  • Malware protection
  • Firewalls
  • Intrusion detection systems
  • Content filtering
  • Internet proxies
  • Encryption controls
  • Endpoint detection response
  • Log management solutions
• Knowledge and understanding of banking or financial services industry
• Experience with host and/or network log analysis as applied to incident response and threat hunting
• Knowledge of offensive security, with ability to think like an adversary when hunting and responding to incidents
• Knowledge and understanding of security analytics including incident response and Identity Access Management
• Certifications in one or more of:
  • GIAC (Global Information Assurance Certification)
  • OSCP (Offensive Security Certified Professional)
  • OSWP (Offensive Security Wireless Professional)
  • OSCE (Offensive Security Certified Expert)
  • OSEE (Offensive Security Exploitation Expert)
  • OSWE (Offensive Security Web Expert)
• Cloud certifications such as GCP or AWS
• Experience in a 24 x 7 x 365 global security operations center environment

Job Expectations

• Ability to work nights, weekends, and/or holidays as needed or scheduled
• Flexibility to work in a 24/7 environment, including weekends and holidays

Location: Charlotte, NC 28202 (onsite)