Lead Information Security Engineer

About the role

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Cybersecurity. The ideal candidate will have experience in identification, development, and prioritization of security events and automated content, with a well-rounded understanding of on-premises servers, network, endpoint, and cloud detections. The role requires the ability to research and apply critical thinking to over-the-horizon detection capabilities through automated alerting, and to effectively convey observations and development deliverables to a wide audience.

Responsibilities

• Lead operationalization and effectiveness of security content
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information security policy and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry-leading security solutions and best practices to implement components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including managers
• Lead a team to achieve objectives
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Requirements

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
• 2+ years of Regular Expression (regex) experience
• 3+ years of SIEM development experience

Qualifications

• Advanced Information Security technical skills and understanding of information security practices and policies
• Understanding of Agile practices
• Ability to manage complex issues and develop solutions
• Ability to execute in a fast-paced, high-demand environment while balancing multiple priorities
• Knowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutions
• Experience analyzing large data sets
• Experience with host and/or network log analysis as applied to incident response/threat hunting
• Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents
• Strong investigative mindset with an attention to detail
• Ability to present complex issues and recommended solutions to all levels of leadership