Lead Information Security Engineer

Wells Fargo & Company•Chandler, AZ

About The Position

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Cybersecurity. The role focuses on identifying, developing, and prioritizing security events and automated content. The successful candidate will have experience with the development lifecycle, identifying logged events for security use case development, and researching future detection capabilities through automated alerting. A broad understanding of on-premises servers, networks, endpoints, cloud detections, and other technologies is needed, along with the ability to communicate observations and deliverables to varied audiences. The role leads the operationalization and effectiveness of security content, advises internal clients on conformity with corporate security policies and standards, and designs, documents, tests, maintains, and troubleshoots complex security solutions. It applies subject matter expertise and security best practices across multiple information security disciplines, assesses vulnerabilities and risks, and recommends remediation alternatives. The position also leads a team and collaborates with professionals at all levels. The engineer uses AI-assisted tools to accelerate design, coding, testing, analysis, and troubleshooting, while applying technical judgment to validate outputs and account for model limitations, security risks, and operational considerations. AI must be applied responsibly and in alignment with security, compliance, privacy, and ethical standards. Employees are accountable for applicable risk programs and for following Wells Fargo policies and procedures, fulfilling risk and compliance obligations, escalating and remediating issues, and making sound risk decisions. The posting end date is October 22, 2026; the posting may be removed earlier due to applicant volume.

Requirements

At least 5 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination thereof.
At least 2 years of Regular Expression (regex) experience.
At least 3 years of SIEM development experience.
Experience with the development lifecycle and identifying logged events to support security use case development.
Experience identifying, developing, and prioritizing security events and automated content.
Understanding of on-premises servers, networks, endpoints, cloud detections, and a broad range of technologies.
Ability to communicate observations and development deliverables to a wide audience.
Proficiency using AI-assisted development and analysis tools and ability to validate and integrate their outputs.
Ability to account for AI model limitations, security risks, operational considerations, and responsible-use requirements.

Nice To Haves

Advanced information security technical skills and understanding of information security practices and policies.
Understanding of Agile practices.
Experience working on a Scrum team.
Ability to manage complex issues and develop solutions.
Ability to execute in a fast-paced, high-demand environment while balancing multiple priorities.
Knowledge of data security controls, including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutions.
Experience analyzing large data sets.
Experience with host and/or network log analysis as applied to incident response or threat hunting.
Knowledge of offensive security and ability to think like an adversary when hunting and responding to incidents.
Strong investigative mindset and attention to detail.
Ability to present complex issues and recommended solutions to all levels of leadership.

Responsibilities

Lead operationalization and effectiveness of security content.
Provide security consulting on large projects for internal clients to ensure conformity with corporate information security policies and standards.
Design, document, test, and maintain highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
Provide issue-resolution recommendations for complex security solutions.
Review and correlate security logs.
Use security subject matter expertise and best practices across areas including availability, integrity, confidentiality, risk management, threat identification and modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Collaborate with and influence professionals at all levels, including managers.
Lead a team to achieve objectives.
Use AI-assisted development and analysis tools, including GitHub Copilot and approved code-centric agents.
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
Validate and integrate AI-assisted outputs using sound technical judgment.
Account for model limitations, security risks, and operational considerations.
Apply AI responsibly in development and production environments in alignment with security, compliance, privacy, and ethical standards.
Fulfill applicable risk and compliance obligations, follow company policies and procedures, and escalate and remediate issues in a timely and effective manner.