Lead Information Vulnerability Security Engineer

Wells Fargo•Irving, TX

2d•Hybrid

About The Position

Wells Fargo is hiring a Lead Information Vulnerability Security Engineer to own and drive vulnerability remediation from identification through resolution. Vulnerabilities may be identified through enterprise scanning or vendor announcements across infrastructure platforms, including firewalls, routers, switches, and applications. The engineer will organize and track findings, identify engineering owners, coordinate remediation plans and timelines across teams, and report clearly on when fixes will be implemented. The role calls for initiative, strong organization, consistent follow-up, and the ability to influence technical teams while maintaining focus on deadlines and risk. The position also leads computer security incident response activities for highly complex events; provides security consulting on large projects for internal lines of business; and documents, tests, maintains, and recommends issue resolutions for complex security solutions spanning networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security. The engineer reviews and correlates security logs, applies security subject-matter expertise and best practices, identifies vulnerabilities and issues, performs risk assessments, evaluates remediation alternatives, and collaborates with professionals at all levels, including managers. This is a hybrid role requiring three days in the office and two days working from home each week. Visa sponsorships and visa transfers are not available. The posting end date is November 12, 2026, though the posting may be removed earlier due to applicant volume.

Requirements

At least 5 years of Network or Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 5 years of technical experience with network/security devices, asset management experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 3 years of project management experience, with exceptional project management skills and the ability to manage multiple priorities successfully in a rapidly changing environment.
At least 3 years of data analytics experience, including analyzing data sets, drawing conclusions and trends, and communicating those trends to broader audiences.
Effective communication skills, including the ability to write clearly and compellingly and break down complex topics into their most important components.
Experience managing or coordinating security vulnerability remediation.
Experience working with vendor vulnerability reports, security advisories, patches, and remediation activities.
Experience identifying appropriate engineering or technology owners for vulnerabilities.
Experience driving follow-up with engineering teams to establish remediation plans and timelines.
Experience tracking multiple vulnerabilities, owners, dependencies, and target dates simultaneously.
Experience providing clear status reporting on vulnerabilities and remediation progress.
Experience working across security, infrastructure, network, application, and engineering teams.
Ability to take ownership and proactively drive work forward.

Nice To Haves

Certifications such as CCNA, CISSP, or Security+.

Responsibilities

Own and drive security vulnerability remediation from identification through resolution.
Organize and track vulnerability findings from enterprise scanning and vendor announcements across infrastructure platforms.
Identify the appropriate engineering or technology owners for vulnerabilities.
Work with engineering teams to establish remediation plans, timelines, and target dates, and follow up through resolution.
Track multiple vulnerabilities, owners, dependencies, and remediation activities simultaneously.
Provide clear, organized status reporting on vulnerabilities and remediation progress.
Lead computer security incident response activities for highly complex events.
Provide security consulting on large projects for internal lines of business to ensure conformity with corporate information security policies and standards.
Document, test, and maintain complex security solutions, and provide issue-resolution recommendations.
Review and correlate security logs.
Apply security expertise and best practices to areas including availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Collaborate with and influence professionals at all levels, including managers.