Information Security Engineer Security Baseline Configuration

Wells Fargo Bank•Charlotte, NC

1d•Hybrid

About The Position

Wells Fargo is seeking an Information Security Engineer to support the Security Baseline Configuration program within Cybersecurity. The role helps modernize and scale secure-by-default configuration standards across enterprise technologies by partnering with Product Owners, security teams, and infrastructure engineering organizations. It contributes to developing, implementing, validating, and managing security baselines aligned with industry standards and enterprise security requirements. The engineer supports adoption and lifecycle management of baselines across technologies including Active Directory, operating systems, databases, firewalls, routers, switches, cloud platforms, and perimeter security solutions. The position involves collaboration across teams, work through established governance and tracking processes, and use of automation and AI-enabled tools to improve efficiency and consistency. The role also supports vulnerability remediation, configuration hardening, and technical guidance for security-related initiatives. The position follows a hybrid schedule requiring at least three days per week in the office. Locations listed are Charlotte, North Carolina (CIC); Chandler, Arizona; Irving, Texas; and Minneapolis, Minnesota. The position is not eligible for visa sponsorship. The posted base pay range is $37.02–$63.94; pay may vary based on factors including performance, skills, experience, and work location. Eligible employees may also qualify for incentive opportunities.

Requirements

At least 2 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education.
Strong analytical skills and ability to assess technical requirements and identify downstream implementation impacts.
Ability to collaborate and communicate effectively and influence outcomes across multiple teams.
Ability to manage multiple priorities and execute effectively in a fast-paced environment.
Ability to use AI responsibly and validate AI-assisted outputs, taking account of security, compliance, privacy, ethical, and operational considerations.
Ability to work a hybrid schedule with at least 3 days per week in the office.

Nice To Haves

Experience supporting security baseline configuration, hardening, or infrastructure security initiatives.
Knowledge of CIS Benchmarks and security configuration hardening principles.
Familiarity with Security Technical Implementation Guides (STIGs) or other industry-recognized security standards.
Experience working with Product Owners, engineering teams, and governance stakeholders to implement security requirements.
Understanding of one or more technology domains: Active Directory and directory services; Windows or Linux operating systems; databases; network infrastructure such as switches, routers, and firewalls; or cloud platforms and cloud security controls.
Experience using Jira for workflow management, issue tracking, and operational governance.
Experience creating and maintaining technical documentation, procedures, and implementation guidance.
Exposure to scripting or automation technologies such as PowerShell, Python, Bash, or similar tools.
Familiarity with AI-assisted engineering tools, including GitHub Copilot, and understanding of secure and responsible AI usage.

Responsibilities

Participate in security consulting engagements to ensure technology configurations align with corporate security policies, standards, and baseline requirements.
Partner with Product Owners to evaluate proposed security baseline controls and support acceptance, rejection, or exception decisions.
Assess downstream impacts of baseline changes across technology platforms and coordinate implementation activities with stakeholders.
Support the development, documentation, maintenance, and validation of security baseline configurations across infrastructure, cloud, network, operating system, database, and directory service technologies.
Track baseline requests, dependencies, approvals, and implementation activities through Jira workflows and associated governance processes.
Assist with migration and maintenance of baseline inventories and configuration standards within enterprise cloud security platforms.
Review, document, and validate security configuration requirements aligned with enterprise policy, CIS Benchmarks, and other recognized industry frameworks.
Use automation, scripting, and AI-enabled tools, including GitHub Copilot capabilities, to improve operational efficiency, documentation quality, and baseline management processes.
Collaborate with engineering, operations, risk, and cybersecurity teams to resolve issues and achieve program objectives.
Provide technical support and guidance for security-related configuration and hardening initiatives.
Support vulnerability remediation efforts by ensuring baseline controls effectively address identified security risks.
Demonstrate proficiency using AI-assisted development and analysis tools, including GitHub Copilot and approved code-centric agents.
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
Apply technical judgment when validating and integrating AI-assisted outputs into solutions.
Account for model limitations, security risks, and operational considerations.
Apply AI responsibly in development and production environments and ensure its use aligns with security, compliance, privacy, and ethical standards.
Follow applicable Wells Fargo risk and compliance programs, policies, and procedures; escalate and remediate issues in a timely and effective manner.