Lead Information Security Engineer - Web Application Security

Wells Fargo & Company•Columbus, OH

2d•$119,000 - $187,000•Hybrid

About The Position

Wells Fargo is seeking a Lead Information Security Engineer to join the Inbound Web Application Security team. The role provides audit and control support, improves processes, creates engineering documentation, and supports engagements and application IDs, including change creation, review, and approval for technologies in the inbound web application security space. The position provides security consulting for large internal projects to ensure compliance with corporate information security policies and standards. It designs, documents, tests, and maintains complex security solutions; reviews and correlates security logs; applies security expertise and best practices; and identifies vulnerabilities, assesses risks, and evaluates remediation alternatives. The engineer collaborates with and influences professionals at all levels, including managers. The position offers a hybrid work schedule. It may require off-hours work and occasional weekends to support change activities. Visa sponsorship and relocation assistance are not available. The posted base pay range is $119,000–$187,000; employees may also be eligible for incentive opportunities.

Requirements

At least 5 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination of these.
At least 5 years of experience in an enterprise environment.
Ability to work off hours and occasional weekends to support change activities.

Nice To Haves

Layer 7 web security experience, including Bot, API, L7 DDoS, or WAF.
Advanced knowledge of HTTP/S.
ServiceNow experience.
Experience with Akamai and/or Cloudflare.
Content delivery network experience.
Familiarity with DNS and load balancing.
Technical documentation experience.
Jira and Confluence experience.
Strategic planning experience translating leadership vision into executable strategies and initiatives.
Technology experience in the Financial Services sector.
Ability to coordinate completion of multiple tasks and meet aggressive time frames.
Advanced critical thinking, problem-solving, and technical troubleshooting abilities.
Strong analytical skills with high attention to detail and accuracy.
Experience thriving in a complex, fast-paced technology and/or information security organization within a large enterprise environment.

Responsibilities

Provide security consulting on large projects for internal clients to ensure conformity with corporate information security policy and standards.
Design, document, test, and maintain highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
Provide issue-resolution recommendations for complex security solutions.
Review and correlate security logs.
Apply subject matter knowledge of security solutions and best practices across availability, integrity, confidentiality, risk management, threat identification and modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Collaborate with and influence professionals at all levels, including managers.
Provide audit and control support, improve processes, create engineering documentation, and support engagements and application IDs, including change creation, review, and approval.