Senior Info Security Engineer

Wells Fargo Bank•Raleigh, NC

1d•$100,000 - $179,000

About The Position

About this role: Wells Fargo is seeking a Senior Information Security Engineer in Cybersecurity as part of Secure Network Services. Learn more about career areas and business divisions at wellsfargojobs.com This role will support and enhance enterprise Secure Web Gateway (SWG) and proxy services in a highly regulated, large-scale environment. This role is hands-on and operational, responsible for the full lifecycle of proxy and web security services — from policy design and onboarding to incident troubleshooting and continuous improvement. In this role, you will: Provide day-to-day operational and engineering support for enterprise Secure Web Gateway and proxy services in a large, regulated environment Design, implement, test, and maintain proxy and web security policies, including URL filtering, SSL inspection, authentication, and access control Support application onboarding requests, working closely with internal customers to ensure secure and functional web access Troubleshoot and resolve proxy-related issues ranging from application connectivity failures to end-user web access issues Participate in security incident response activities related to web security, including investigation, root cause analysis, and remediation Review and correlate proxy, web, and security logs (e.g., via Splunk) to diagnose issues and support incident investigation Perform post-incident analysis and recommend improvements to policies, configurations, and processes Identify security vulnerabilities and control gaps related to web access and proxy services and evaluate remediation options Collaborate closely with network, endpoint, IAM, cloud security, and SOC teams to resolve issues and implement secure solutions Operate within a formal change management and ticketing environment, ensuring proper documentation and adherence to security and audit requirements

Requirements

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2 + years of hands-on administration experience with Secure Web Gateway (SWG) or enterprise proxy platforms in production

Nice To Haves

Broadcom Secure Web Gateway (Proxy SG, Edge SWG, Cloud SWG, or Broadcom WSS)
Strong experience configuring and troubleshooting: Proxy policies and rule sets Authentication and directory integrations SSL/TLS inspection Web access and application onboarding issues
Experience translating abstract security requirements into enforceable proxy and web access policies
Experience supporting security services in a ticket-driven, operational environment
Ability to investigate and resolve production issues impacting internal users and applications
Strong documentation and communication skills, with the ability to work directly with internal customers
Experience with cloud-based proxy and SSE platforms such as Netskope or Zscaler
Experience administering CASB / CASM solutions
Splunk experience, including log analysis and troubleshooting support
Familiarity with Secure Service Edge (SSE) concepts and Zero Trust Network Access (ZTNA) architectures
Experience supporting proxy services in large, regulated environments
Familiarity with Agile delivery models and formal change management processes
Change management and process analysis experience

Responsibilities

Provide day-to-day operational and engineering support for enterprise Secure Web Gateway and proxy services in a large, regulated environment
Design, implement, test, and maintain proxy and web security policies, including URL filtering, SSL inspection, authentication, and access control
Support application onboarding requests, working closely with internal customers to ensure secure and functional web access
Troubleshoot and resolve proxy-related issues ranging from application connectivity failures to end-user web access issues
Participate in security incident response activities related to web security, including investigation, root cause analysis, and remediation
Review and correlate proxy, web, and security logs (e.g., via Splunk) to diagnose issues and support incident investigation
Perform post-incident analysis and recommend improvements to policies, configurations, and processes
Identify security vulnerabilities and control gaps related to web access and proxy services and evaluate remediation options
Collaborate closely with network, endpoint, IAM, cloud security, and SOC teams to resolve issues and implement secure solutions
Operate within a formal change management and ticketing environment, ensuring proper documentation and adherence to security and audit requirements