Lead Vulnerability & Patch Management Information Security Engineer

Wells Fargo•Irving, TX

2d•$119,000 - $187,000•Hybrid

About The Position

Wells Fargo is seeking a Lead Vulnerability & Patch Management Information Security Engineer to help modernize and transform enterprise Vulnerability and Patch Management (VPM) capabilities through advanced automation, cloud security engineering, data analytics, and AI-driven solutions. This role will serve as a technical leader responsible for designing and implementing scalable security solutions that enhance vulnerability management, incident response, security monitoring, and risk reduction across a complex hybrid and multi-cloud environment. The ideal candidate will bring a blend of information security engineering, automation, cloud security, data engineering, and vulnerability management expertise to support the evolution of VPM 2.0—an initiative focused on replacing manual processes with API-driven automation, intelligent data correlation, and AI-enabled decision support capabilities.

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Nice To Haves

3+ years of cybersecurity experience within a large financial institution or highly regulated environment.
3+ years of experience in vulnerability management and/or patch management tools and techniques.
Experience developing automation solutions utilizing APIs, scripting, and programming languages such as Python, PowerShell, or similar technologies.
Experience integrating security controls and scanning solutions into CI/CD pipelines and Infrastructure as Code (IaC) environments.
Strong understanding of vulnerability management lifecycle processes, vulnerability scanners, and remediation workflows.
Experience working across hybrid and multi-cloud environments, including AWS, Azure, and Google Cloud Platform.
Experience with security data aggregation, data lakes, data normalization, and vulnerability intelligence platforms.
Strong SQL and data analysis skills, including the ability to build and optimize complex queries supporting vulnerability management programs.
Experience leveraging AI, machine learning, or advanced analytics to enhance security operations and risk management processes.
Knowledge of security logging, monitoring, threat detection, and incident response best practices.
Excellent verbal, written, and executive communication skills with the ability to translate complex technical concepts into actionable business outcomes.
Strong leadership, strategic thinking, and problem-solving skills.

Responsibilities

Provide security consulting on large-scale technology initiatives to ensure alignment with Wells Fargo information security policies, standards, and regulatory requirements.
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to cloud security, application security, networking, authentication, cryptography, and enterprise security platforms.
Lead efforts to modernize Vulnerability and Patch Management (VPM) processes through automation and engineering-driven solutions.
Develop and support API-first integrations, automation frameworks, and scripting solutions that improve vulnerability discovery, analysis, reporting, and remediation workflows.
Partner with engineering and DevOps teams to integrate vulnerability management capabilities into CI/CD pipelines and Infrastructure as Code (IaC) environments.
Review, correlate, and analyze security logs and vulnerability data from multiple security tools and cloud platforms to identify risks and emerging threats.
Design and optimize security data pipelines, aggregation processes, and normalization workflows that consolidate vulnerability intelligence across the enterprise.
Utilize advanced SQL querying, data analytics, and data correlation techniques to improve vulnerability visibility, prioritization, and reporting.
Support AI-driven initiatives focused on enhancing vulnerability management through intelligent recommendations, automated analysis, and risk-based decision support.
Provide technical leadership in hybrid and multi-cloud environments, ensuring security controls and vulnerability management processes operate effectively across diverse cloud platforms.
Identify security vulnerabilities and risks, perform security assessments, and evaluate remediation alternatives based on business and technical requirements.
Utilize deep subject matter expertise in information security principles including threat identification, monitoring, vulnerability management, risk management, incident response, confidentiality, integrity, availability, and access management.
Conduct research and evaluation of emerging technologies, security tools, and industry best practices to address evolving cyber threats and business needs.
Collaborate and influence all levels of professionals, including engineers, architects, managers, and senior leaders.
Lead cross-functional teams and initiatives to achieve strategic security objectives and improve enterprise security posture.
Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions
Understand and account for model limitations, security risks, and operational considerations
Apply AI responsibly in development and production environments
Ensure AI usage aligns with security, compliance, privacy, and ethical standards