Lead Information Security Engineer - Web Application Security

Wells Fargo Bank•Charlotte, NC

1d•$119,000 - $187,000•Hybrid

About The Position

Wells Fargo is seeking a Lead Information Security Engineer to join the Inbound Web Application Security team. The role provides audit and control support, improves processes, creates engineering documentation, and supports engagements, application IDs, and change creation, review, and approval for technologies in inbound web application security. The engineer provides security consulting on large internal projects to ensure compliance with corporate information security policies and standards. The role designs, documents, tests, and maintains complex security solutions; recommends resolutions to issues; reviews and correlates security logs; and applies security expertise and best practices across areas such as risk management, threat identification, monitoring, incident response, access management, and business continuity. The position also identifies vulnerabilities, assesses risk, evaluates remediation options, and collaborates with professionals at all levels. This position offers a hybrid work schedule. It may require working off hours and occasional weekends to support change activities. Visa sponsorship and relocation assistance are not available.

Requirements

At least 5 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination of these.
At least 5 years of experience in an enterprise environment.

Nice To Haves

Layer 7 web security experience, including Bot, API, L7 DDoS, or WAF.
Advanced knowledge of HTTP/S.
ServiceNow experience.
Experience with vendors such as Akamai and/or Cloudflare.
Content delivery network experience.
Familiarity with DNS and load balancing.
Technical documentation experience.
Jira and Confluence experience.
Strategic planning experience translating leadership vision into executable strategies and initiatives.
Technology experience in the Financial Services sector.
Ability to coordinate completion of multiple tasks and meet aggressive time frames.
Advanced critical thinking, problem-solving, and technical troubleshooting abilities.
Strong analytical skills with high attention to detail and accuracy.
Ability to thrive in a complex, fast-paced technology and/or information security organization within a large enterprise environment.

Responsibilities

Provide security consulting on large projects for internal clients to ensure conformity with corporate information security policy and standards.
Design, document, test, and maintain highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
Provide issue-resolution recommendations for complex security solutions.
Review and correlate security logs.
Apply security subject-matter knowledge and best practices to implement information security components, including availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Provide audit and control support, improve processes, create engineering documentation, and support engagements and application IDs.
Support change creation, review, and approval for technologies in the inbound web application security space.
Collaborate with and influence professionals at all levels, including managers.
Work off hours and occasional weekends to support change activities.