Lead Information Security Engineer Web and Email Security

Wells Fargo Bank•Iselin, NJ

1d•$119,000 - $224,000•Hybrid

About The Position

About this role: Wells Fargo is seeking a Lead Information Security Engineer to join our Enterprise Web & Email Security team to lead, design, and implement strategy for proxy-based controls, Cloud Secure Web Gateway (Cloud SWG), and Cloud Access Security Broker (CASB) capabilities in a hybrid environment. The ideal candidate will bring broad security experience across on‑prem and cloud-based web security platforms, with strong knowledge across multiple layers of defense including endpoint, proxy, SaaS, and infrastructure. This role is designed to ensure success in our next‑generation approach to discovering, controlling, and mitigating cloud and web-based risk pathways across both on-prem and cloud environments. In this role, you will: Lead the design and implementation of enterprise proxy policy, Cloud SWG, and CASB controls for highly complex hybrid platform solutions Participate in technical investigations of security incidents related to web, SaaS, and cloud access, including post‑incident analysis and recommendations for mitigation Provide security consulting for large initiatives to ensure alignment with corporate security policies, standards, and architectural direction Drive, design, document, and maintain a baseline set of security requirements and controls for web, proxy, and cloud access security solutions Apply subject matter expertise in industry‑leading security technologies and best practices across risk management, threat identification, monitoring, incident response, and access control Identify security gaps and architectural weaknesses in web and SaaS access patterns and evaluate remediation alternatives Collaborate with and influence engineers, architects, managers, and business partners across technology and security teams Lead and mentor a team to deliver on strategic and operational objectives

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Nice To Haves

Experience with enterprise proxy platforms, Cloud Secure Web Gateways (SWG), or web filtering technologies
Demonstrated experience with Cloud Access Security Broker (CASB) solutions and SaaS visibility/control
Familiarity with URL categorization, SaaS risk classification, and policy-driven access enforcement
Experience leveraging Splunk or comparable SIEM platforms for security investigation, and operational analysis related to web activity
Strong analytical, investigative, and problem‑solving skills
Knowledge of regulatory and compliance expectations within a large financial institution
Ability to operate in a fast‑paced, high‑scrutiny environment with SLAs and operational accountability
Strong communication skills with the ability to partner effectively across business, engineering, and architecture teams

Responsibilities

Lead the design and implementation of enterprise proxy policy, Cloud SWG, and CASB controls for highly complex hybrid platform solutions
Participate in technical investigations of security incidents related to web, SaaS, and cloud access, including post‑incident analysis and recommendations for mitigation
Provide security consulting for large initiatives to ensure alignment with corporate security policies, standards, and architectural direction
Drive, design, document, and maintain a baseline set of security requirements and controls for web, proxy, and cloud access security solutions
Apply subject matter expertise in industry‑leading security technologies and best practices across risk management, threat identification, monitoring, incident response, and access control
Identify security gaps and architectural weaknesses in web and SaaS access patterns and evaluate remediation alternatives
Collaborate with and influence engineers, architects, managers, and business partners across technology and security teams
Lead and mentor a team to deliver on strategic and operational objectives