Information Security Engineer Security Baseline Configuration

Wells Fargo•Minneapolis, MN

21h•$37 - $64•Hybrid

About The Position

Wells Fargo is seeking an Information Security Engineer to support the Security Baseline Configuration program within Cybersecurity. The role helps modernize and scale secure-by-default configuration standards across enterprise technologies by partnering with Product Owners, security teams, and infrastructure engineering organizations. The engineer contributes to the development, implementation, validation, and lifecycle management of security baselines aligned with industry standards and enterprise security requirements. The work spans technologies such as Active Directory, operating systems, databases, firewalls, routers, switches, cloud platforms, and perimeter security solutions. The position requires analytical skills, cross-team collaboration, and the ability to progress work through established governance and tracking processes, including the use of automation and AI-enabled tools. The position is based in Charlotte, North Carolina; Chandler, Arizona; Irving, Texas; or Minneapolis, Minnesota. Employees must work a hybrid schedule with at least three days per week in the office. The position is not eligible for visa sponsorship. The stated base pay range is $37.02–$63.94; pay may vary based on factors including performance, skills, experience, and work location, and employees may also be eligible for incentives.

Requirements

At least 2 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination.
Ability to work a hybrid schedule with at least 3 days per week in the office.
Ability to apply technical judgment to validate AI-assisted outputs and account for model limitations, security risks, and operational considerations.
Ability to use AI responsibly in development and production environments in alignment with security, compliance, privacy, and ethical standards.

Nice To Haves

Experience supporting security baseline configuration, hardening, or infrastructure security initiatives.
Knowledge of CIS Benchmarks and security configuration hardening principles.
Familiarity with Security Technical Implementation Guides (STIGs) or other industry-recognized security standards.
Experience working with Product Owners, engineering teams, and governance stakeholders to implement security requirements.
Understanding of one or more technology domains: Active Directory and directory services; Windows or Linux operating systems; databases; network infrastructure such as switches, routers, and firewalls; or cloud platforms and cloud security controls.
Experience using Jira for workflow management, issue tracking, and operational governance.
Ability to analyze technical requirements and identify downstream implementation impacts.
Experience creating and maintaining technical documentation, procedures, and implementation guidance.
Exposure to scripting or automation technologies such as PowerShell, Python, Bash, or similar tools.
Familiarity with AI-assisted engineering tools, including GitHub Copilot, and understanding of secure and responsible AI usage.
Strong collaboration and communication skills, including the ability to influence outcomes across multiple teams.
Ability to manage multiple priorities and execute effectively in a fast-paced environment.

Responsibilities

Participate in security consulting engagements to ensure technology configurations align with corporate security policies, standards, and baseline requirements.
Partner with Product Owners to evaluate proposed security baseline controls and support acceptance, rejection, or exception decisions.
Assess downstream impacts of baseline changes across technology platforms and coordinate implementation activities with stakeholders.
Support the development, documentation, maintenance, and validation of security baseline configurations across infrastructure, cloud, network, operating system, database, and directory service technologies.
Track baseline requests, dependencies, approvals, and implementation activities through Jira workflows and associated governance processes.
Assist with migration and maintenance of baseline inventories and configuration standards within enterprise cloud security platforms.
Review, document, and validate security configuration requirements aligned with enterprise policy, CIS Benchmarks, and other recognized industry frameworks.
Use automation, scripting, and AI-enabled tools, including GitHub Copilot capabilities, to improve operational efficiency, documentation quality, and baseline management processes.
Collaborate with engineering, operations, risk, and cybersecurity teams to resolve issues and achieve program objectives.
Provide technical support and guidance for security-related configuration and hardening initiatives.
Support vulnerability remediation by ensuring baseline controls effectively address identified security risks.
Use AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agents.
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
Apply technical judgment when validating and integrating AI-assisted outputs into solutions.
Account for AI model limitations, security risks, and operational considerations.
Apply AI responsibly in development and production environments and ensure its use aligns with security, compliance, privacy, and ethical standards.
Follow applicable Wells Fargo risk programs, policies, procedures, and compliance obligations; escalate and remediate issues as appropriate.