Lead Information Vulnerability Security Engineer

Wells Fargo Bank•Irving, TX

1d•Hybrid

About The Position

Wells Fargo is seeking a Lead Information Security Engineer to take ownership of vulnerability remediation from identification through resolution. Vulnerabilities may be identified through enterprise scanning or vendor announcements across infrastructure platforms, including firewalls, routers, switches, and applications. The role organizes and tracks findings, identifies engineering owners, coordinates remediation plans and timelines, and reports on when patches or fixes will be implemented. It requires initiative, consistent follow-up, strong organization, and the ability to influence technical teams while keeping deadlines and risk in view. The position also leads responses to highly complex computer security incidents; advises internal lines of business on security for large projects; documents, tests, and maintains complex security solutions; reviews and correlates security logs; and applies security best practices across areas such as networking, cryptography, cloud, authentication, directory services, email, internet, applications, endpoint security, risk management, threat identification, access management, and business continuity. The role identifies vulnerabilities, assesses risks, evaluates remediation options, and collaborates with professionals at all levels. This is a hybrid role with three days in the office and two days working from home. Visa sponsorship and visa transfers are not available.

Requirements

At least 5 years of Network / Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 5 years of technical experience with Network/Security devices, Asset Management experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 3 years of project management experience.
Exceptional project management skills and demonstrated ability to manage multiple priorities in a rapidly changing environment.
At least 3 years of data analytics experience.
Ability to analyze data sets, identify conclusions and trends, and communicate those trends to broader audiences.
Effective communication skills, including clear and compelling writing that breaks complex topics down into their most important components.
Ability to manage or coordinate vulnerability remediation, work with vendor vulnerability reports and advisories, identify engineering owners, establish remediation plans and timelines, track multiple findings and dependencies, provide status reporting, and proactively drive work forward.

Nice To Haves

Certifications such as CCNA, CISSP, or Security+.

Responsibilities

Lead computer security incident response activities for highly complex events.
Provide security consulting on large projects for internal lines of business to ensure conformity with corporate information security policies and standards.
Document, test, and maintain highly complex security solutions, and provide issue-resolution recommendations.
Review and correlate security logs.
Use security subject matter expertise and best practices to implement information security components, including availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Organize and track vulnerability findings from enterprise scanning and vendor announcements across infrastructure platforms.
Identify appropriate engineering or technology owners and coordinate remediation plans and timelines.
Follow up with engineering teams, track vulnerabilities and remediation activities through resolution, and report progress clearly.
Collaborate with and influence professionals at all levels.