Principal Engineer - Crypto/SDLC TISO

Wells Fargo & Company•Iselin, NJ

1d•$159,000 - $305,000•Hybrid

About The Position

Wells Fargo is seeking a cybersecurity technical information security officer with a proven track record of securing custody, tokenization, and blockchain-based infrastructure technology environments. The ideal candidate will have extensive experience in distributed ledger technology, blockchain, and digital assets. This role serves as the Technical Information Security Officer on threats to crypto services. You will be responsible for threat modeling, prescribing, designing, and assuring preventative and detective cybersecurity controls, and directing adversarial testing. You will combine deep technical expertise with strategic thinking to design security solutions that protect mission-critical systems, ensure regulatory compliance, and support business growth.

Requirements

7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2+ years of experience in architecting and securing digital asset ecosystems, including custody, tokenization platforms, and blockchain protocols.

Nice To Haves

Demonstrated experience in threat modeling, security architecture, and prescribing security controls for complex systems.
Strong experience in risk management, digital assets custody security, smart contract risk assessment, and third-party risk management.
Proven success in influencing and providing technical guidance to engineering and product teams.
Excellent executive communication, strategic thinking, and problem-solving skills.
Bachelor's degree in Computer Science or a related technical field.
Experience in offensive security (penetration testing, red team operations).
Author of patents in digital asset custody or blockchain infrastructure security.

Responsibilities

Act as the lead technical cybersecurity subject matter expert for the firm's blockchain infrastructure, tokenization platforms, and digital-asset services, with a focus on threat modeling and risk mitigation.
Conduct in-depth threat modeling of crypto services to identify vulnerabilities and prescribe appropriate cybersecurity controls.
Design, architect, and advise on the implementation of preventative and detective security controls for our digital asset platforms.
Direct and manage adversarial testing activities, including penetration testing and red team exercises, to validate the security of our crypto services.
Partner with governance, legal, and compliance teams to demonstrate control effectiveness and strengthen enterprise readiness for scaled digital-asset adoption.
Develop and integrate smart contract security best practices into the Software Development Lifecycle (SDLC), including threat modeling and architectural security reviews.
Collaborate with third-party oversight teams to evaluate the security posture of blockchain technology vendors and assess associated risks.
Partner with product and engineering teams to embed security-by-design principles, accelerating secure development and reducing time-to-market.