Lead Information Security Engineer

Wells Fargo Bank•Chandler, AZ

12h•Hybrid

About The Position

We are seeking a Lead Information Security Engineer to provide technical leadership and strategic execution for our Security Baseline Configuration program. This role is responsible for driving complex security engineering initiatives, influencing outcomes across multiple organizations, and delivering scalable solutions that improve security posture through automation, standardization, and operational excellence.

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Experience implementing or governing security baselines aligned to CIS Benchmarks
Strong understanding of operating system security, network security, encryption, and secure configuration management
Strong stakeholder management skills with experience influencing senior leaders and technical teams without direct authority
Experience building organizational consensus around security controls, standards, and implementation approaches
Deep expertise in security engineering, security architecture, or security baseline configuration management
Demonstrated track record of driving measurable operational improvements through process optimization and automation.

Nice To Haves

Experience designing and implementing automation solutions using scripting or programming languages such as PowerShell, Python, Bash, Java, or C#
Experience integrating security controls into DevSecOps, CI/CD, infrastructure-as-code, or configuration management pipelines
Demonstrated experience leading large-scale, cross-functional security engineering initiatives
Proven ability to manage competing priorities, dependencies, and risk across a high-volume workload
Experience leveraging AI and automation responsibly to improve efficiency while maintaining appropriate security controls
Exceptional written and verbal communication skills with the ability to translate technical concepts into business-focused outcomes
Experience with vulnerability management, configuration compliance, security control validation, or security posture management
Experience with Jira, Agile delivery methodologies, workflow governance, and portfolio management practices
Experience in a regulated financial services or highly regulated industry environment
One or more of the following certifications is strongly preferred: Relevant cloud security certifications (Azure, AWS, GCP), CISSP (Certified Information Systems Security Professional), GIAC Security Certifications (GSEC, GDSA, GCIA, GCSA, or equivalent), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), Microsoft Security Certifications, Certified Cloud Security Professional (CCSP).

Responsibilities

Lead complex security engineering initiatives from intake through implementation, publication, and adoption
Establish prioritization frameworks and work management practices that ensure predictable delivery across a dynamic portfolio
Partner with engineering, infrastructure, architecture, and governance teams to drive secure-by-default solutions
Influence technical and business stakeholders without direct authority to achieve alignment on security requirements and risk mitigation strategies
Define and maintain security baseline standards, governance models, and lifecycle processes
Develop risk-based recommendations that balance security, operational requirements, and business objectives
Drive automation initiatives that improve consistency, reduce manual effort, and accelerate delivery
Create executive-ready communications, decision records, status reporting, and risk briefings
Mentor engineers and contribute to the professional development of team members through coaching and technical leadership
Serve as a trusted advisor and escalation point for complex security engineering decisions and implementation challenges.