Platform Infrastructure Vulnerability Engineer

Wells Fargo•Iselin, NJ

16h•$119,000 - $224,000•Hybrid

About The Position

Wells Fargo is seeking a Platform Infrastructure Vulnerability Engineer as part of the Commercial and Corporate & Investment Banking Technology team. In this role, you will lead complex, broad impact initiatives, including providing high-level systems consultation for technology teams. You will be a key participant in large-scale planning of computer systems and network infrastructure for the Systems Operations functional area. You will review and analyze complex technical challenges and escalated support issues related to core business solutions, requiring in-depth evaluation of multiple factors such as alternatives, enhancements, periodic systems reviews, or improvements to existing systems. You will consult with the engineering team on change design, requiring a solid understanding of technical process controls or standards that influence and drive new initiatives. You will collaborate and consult with technical peers, colleagues, and mid to more experienced level managers to resolve systems support issues and achieve goals. You will govern vulnerability and patch compliance across CCIBT controls, ensuring alignment with enterprise risk and audit requirements. You will implement control validation processes to identify patching gaps, missed cycles, and non-compliant assets. You will prioritize remediation efforts by combining vulnerability severity with business impact and asset criticality.

Requirements

5+ years of Systems Engineering, Technology Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of experience in vulnerability management, patch management, or infrastructure security
2+ years of experience working with Relationship Database Management Systems (RDBMS) such as SQL Server, Oracle or MySQL

Nice To Haves

Strong technical understanding of vulnerabilities across operating systems, middleware, databases, and network layers within complex, distributed environments
Hands-on experience with scripting and automation (Python, Unix/Linux Shell, PowerShell, or similar) to support vulnerability scanning, data processing, and remediation workflows.
Solid knowledge of security and infrastructure frameworks, including NIST, CIS Benchmarks, ISO, and PCI-DSS, with the ability to apply them in regulated environments.
Experience securing modern infrastructure, including cloud platforms (AWS, Azure) and containerized environments (OpenShift, Kubernetes), with a focus on vulnerability detection and remediation.
Understanding of the full Software Development Lifecycle (SDLC) and integration of security practices within DevSecOps pipelines
Experience working in financial services or other highly regulated industries, with an emphasis on compliance, audit readiness, and risk governance.

Responsibilities

Lead complex, broad impact initiatives including provision of high level systems consultation for the technology teams
Work as key participant in large scale planning of computer systems and network infrastructure for Systems Operations functional area
Review and analyze complex technical challenges, as well as escalated support issues related to core business solutions that require in depth evaluation of multiple factors, such as alternatives, enhancements, periodic systems reviews, or improvements to existing systems
Consult with engineering team on change design requiring solid understanding of technical process controls or standards that influence and drive new initiatives
Collaborate and consult with technical peers, colleagues, and mid to more experienced level managers to resolve systems support issues and achieve goals
Govern vulnerability and patch compliance across CCIBT controls, ensuring alignment with enterprise risk and audit requirements
Implement control validation processes to identify patching gaps, missed cycles, and non-compliant assets.
Prioritize remediation efforts by combining vulnerability severity with business impact and asset criticality