Lead Information Security Engineer

Wells Fargo•Irving, TX

5d•$119,000 - $224,000•Hybrid

About The Position

Wells Fargo is seeking a Lead Information Security Engineer for the Database Technology organization. In this role, you will lead computer security incident response activities for highly complex events, conduct technical investigations of security-related incidents and post-incident digital forensics to identify causes and recommend future mitigation strategies, and provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards. You will also design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security. Additionally, you will review and correlate security logs, utilize subject matter knowledge in industry-leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity. You will identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives. This role involves collaborating and influencing all levels of professionals, including managers, and leading a team to achieve objectives.

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
5+ years of hands-on experience in relational and non-relational DBMS
5+ years of experience in database security, database administration, or a combination of both
5+ years of scripting experience using Windows PowerShell, Unix Shell Scripting, Python

Nice To Haves

5+ years of hands-on experience in information security tools and technologies
5+ years of experience in combination of database masking, database monitoring or Database Vulnerabilities
5+ years of experience process definition, assessment and documentation
5+ years Ansible experience
IBM Security Guardium
Splunk Architecture
CISSP/CCSP
Experience in Azure/AWS/GCP
5+ years of scripting experience using Java or PL-SQL
Knowledge and understanding of Big Data
Knowledge and understanding of application security planning and security architecture
Knowledge and understanding of information security risk assessment or audit
Experience with Database authentication tools, database firewall and Encryption is preferred
Experience with Azure services for database servers and instances
Experience in Azure Arc hybrid and multi-cloud environment
Understanding of cloud authentication (AWS and GCP) for managed database instances
Good understanding of NIST and CIS Database Security standards
Familiar with data security frameworks and standards such as PCI, ITIL, COBIT, ISO 27001
Excellent verbal and written communication skills
Advanced Information Security technical skills
Ability to manage complex issues and develop solutions

Responsibilities

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives