Senior Information Security Engineer

Wells Fargo & Company•Concord, CA

5d•$100,000 - $196,000•Hybrid

About The Position

About this role: Wells Fargo is seeking a Senior Information Security Engineer Technology as part of Cybersecurity - Identity and Access Management (IAM). Learn more about the career areas and lines of business at wellsfargojobs.com. This position is a technical role that will assist with support of the production and test infrastructure and systems for current and expanding Wells Fargo Identity and Access Management applications. The role will be one of a growing team of on and offshore engineers to assist with maintaining the availability and performance of the production and test systems. Additionally, will work with application development and software engineering teams to meet technical deliverables while leveraging solid understanding of technical process controls and optimize performance. In this role, you will: Lead or participate in computer security incident response activities for moderately complex events Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security Review and correlate security logs Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Requirements

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Nice To Haves

3+ years of Linux engineering or administration experience
3+ years of automation and scripting experience with Python, PowerShell, Excel VBA, or JavaScript
2+ years of experience with enterprise monitoring and logging solutions (Grafana, Splunk, Elastic, AppDynamics, or similar)
2+ years of experience working with OpenShift (OCP) or Kubernetes-based platforms
Experience with automation and GenAI tools (OpenAI, Copilot, or similar LLM-based solutions)
Experience with SailPoint or similar Identity Governance & Administration (IGA) platforms
Experience working with cloud environments (Azure, AWS, or GCP)
Ability to perform root cause analysis in complex distributed systems
Strong analytical and problem‑solving skills in high‑demand environments
Experience developing runbooks, operational documentation, or process automations
Excellent verbal, written, and interpersonal communication skills
Certifications such as CISSP, CCSP, or CISM

Responsibilities

Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals