Lead Security Architect (Application Security)

Wells Fargo Bank•Charlotte, NC

1d•Hybrid

About The Position

Wells Fargo is seeking a Lead Systems Architect - Application Security to join the Security Architecture organization. This role will provide security architecture leadership across application development, APIs, DevSecOps, and emerging technologies, helping teams build secure-by-design solutions at enterprise scale. In this role, you will: Lead the implementation of complex projects and initiatives that have companywide scope Drive secure-by-design practices across applications, APIs, cloud-native platforms, and AI-enabled solutions Assist in the creation of architectural artifacts including standards, reference architectures, design patterns, and security requirements Participate in the definition of future technology architecture and Application Security strategy Identify medium to high architectural impact projects and provide security architecture guidance throughout the project lifecycle Conduct complex technology, security, and system assessments for architecture solutions Perform threat modeling, architecture reviews, and risk assessments for critical applications and platforms Provide guidance on DevSecOps, software supply chain security, CI/CD security, and application security testing Make decisions in the development and maintenance of security architectures and controls Understand compliance and risk management requirements for supported areas Ensure applications adhere to established Wells Fargo standards, policies, methodologies, and industry best practices Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals

Requirements

5+ years of Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
5+ years of Information Security, Security Architecture, Application Security, or Software Security experience
Experience performing threat modeling, architecture reviews, and security assessments
Knowledge of secure software development lifecycle (SSDLC) and secure coding practices
Experience securing cloud-based applications, APIs, and modern application architectures

Nice To Haves

Strong knowledge of application security principles, OWASP Top 10, API Security, and common attack vectors
Experience with SAST, DAST, SCA, IaC scanning, and software supply chain security controls
Experience with cloud-native architectures, containers, Kubernetes, microservices, and APIs
Knowledge of Azure, AWS, or Google Cloud security architectures
Experience developing security standards, patterns, and reference architectures
Familiarity with AI/GenAI security risks and mitigation strategies
Strong verbal, written, and stakeholder management skills

Responsibilities

Lead the implementation of complex projects and initiatives that have companywide scope
Drive secure-by-design practices across applications, APIs, cloud-native platforms, and AI-enabled solutions
Assist in the creation of architectural artifacts including standards, reference architectures, design patterns, and security requirements
Participate in the definition of future technology architecture and Application Security strategy
Identify medium to high architectural impact projects and provide security architecture guidance throughout the project lifecycle
Conduct complex technology, security, and system assessments for architecture solutions
Perform threat modeling, architecture reviews, and risk assessments for critical applications and platforms
Provide guidance on DevSecOps, software supply chain security, CI/CD security, and application security testing
Make decisions in the development and maintenance of security architectures and controls
Understand compliance and risk management requirements for supported areas
Ensure applications adhere to established Wells Fargo standards, policies, methodologies, and industry best practices
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions
Understand and account for model limitations, security risks, and operational considerations
Apply AI responsibly in development and production environments
Ensure AI usage aligns with security, compliance, privacy, and ethical standards
Serve as a trusted security architecture advisor for application and platform teams
Partner with engineering, architecture, risk, and cybersecurity teams to drive secure technology adoption
Deliver architecture reviews, threat models, and security recommendations for strategic initiatives
Support and enhance enterprise Application Security standards and secure-by-design practices
Mentor architects and engineers on application security and emerging technology risks
Operate effectively in a highly regulated and risk-driven environment
Influence security strategy, architecture patterns, and technology decisions across the enterprise