Principal Engineer - CDM Tools

Wells Fargo & Company • Philadelphia, PA

4d

About The Position

Wells Fargo is seeking a Principal Engineer in Technology as part of Cybersecurity. The Lead Information Security Engineer is responsible for delivering, integrating, and maintaining cybersecurity tools and capabilities across all security domains. This role provides senior engineering expertise with primary responsibility for Cyber Defense Management, ensuring the organization’s critical defense technologies operate effectively and support enterprise‑wide protection goals. In this role, you will: Lead implementation, optimization, and ongoing management of core cybersecurity platforms, including: Network Detection & Response (NDR), Cloud‑Native Application Protection Platforms (CNAPP), Secure Web Proxy / SWPP, Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), SDLC security tooling (SAST/DAST/code scanning), Vulnerability management tools, Threat intelligence platforms, Telemetry and security data pipelines. Engineer integrations between cybersecurity systems to improve detection, automation, and incident response. Ensure security tools are configured to align with best practices and organizational security requirements. Provide technical leadership to support Cyber Defense Operations and enterprise security initiatives. Develop documentation, standards, and reference architectures for security technologies. Drive continuous improvement of defense technologies to address evolving threats. Lead computer security incident response activities for highly complex events. Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies. Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards. Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security. Review and correlate security logs. Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity. Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives. Collaborate and influence all levels of professionals including managers. Lead a team to achieve objectives. In this role, you will: Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups. Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking. Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions. Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions. Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization. Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership. Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents). Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting. Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions. Understand and account for model limitations, security risks, and operational considerations. Apply AI responsibly in development and production environments. Ensure AI usage aligns with security, compliance, privacy, and ethical standards.

Requirements

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• Hands‑on experience with modern security platforms such as NDR, CNAPP, CSPM, SWPP, vulnerability management suites, or SIEM/SOAR integrations.
• Strong understanding of security architectures, detection engineering, and threat‑driven defense strategies.
• Experience integrating and optimizing tools across hybrid and cloud environments.
• Ability to serve as a senior technical lead and collaborate across security, infrastructure, and application teams.

Nice To Haves

• Experience in large enterprise or public‑sector environments.
• Familiarity with secure development lifecycle practices and code security tools.
• Certifications such as CISSP, GIAC (e.g., GCIA, GMON, GDSA), or cloud security credentials.
• Experience with automation/scripting to support security tooling (Python, PowerShell, or similar).

Responsibilities

• Lead implementation, optimization, and ongoing management of core cybersecurity platforms, including: Network Detection & Response (NDR), Cloud‑Native Application Protection Platforms (CNAPP), Secure Web Proxy / SWPP, Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), SDLC security tooling (SAST/DAST/code scanning), Vulnerability management tools, Threat intelligence platforms, Telemetry and security data pipelines.
• Engineer integrations between cybersecurity systems to improve detection, automation, and incident response.
• Ensure security tools are configured to align with best practices and organizational security requirements.
• Provide technical leadership to support Cyber Defense Operations and enterprise security initiatives.
• Develop documentation, standards, and reference architectures for security technologies.
• Drive continuous improvement of defense technologies to address evolving threats.
• Lead computer security incident response activities for highly complex events.
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies.
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards.
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
• Review and correlate security logs.
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
• Collaborate and influence all levels of professionals including managers.
• Lead a team to achieve objectives.
• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups.
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking.
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions.
• Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions.
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization.
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents).
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions.
• Understand and account for model limitations, security risks, and operational considerations.
• Apply AI responsibly in development and production environments.
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards.

Benefits

• Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed