Senior Information Security Engineer

Wells Fargo•Irving, TX

19h•$100,000 - $196,000•Hybrid

About The Position

Wells Fargo is seeking a Senior Information Security Engineer for the Database Technology organization. The role focuses on security incident response, digital forensics, security consulting, and the design and maintenance of security solutions across databases and related technology areas. The engineer will apply information security tools, practices, and standards to identify threats and vulnerabilities, assess risk, recommend remediation, and support organizational security goals. This position requires working from one of the posted locations in a hybrid environment and includes on-call responsibilities. Visa sponsorship is not available. The base pay range is $100,000.00–$196,000.00; employees may also be eligible for incentive opportunities. The posting end date is October 29, 2026, though it may be removed earlier due to applicant volume.

Requirements

At least 4 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination of these.
At least 4 years of hands-on experience with relational and non-relational DBMS.
At least 4 years of experience in database security, database administration, or both.
At least 4 years of scripting experience using Windows PowerShell, Unix Shell Scripting, and Python.
At least 2 years of DBMS threat analysis and modeling experience.

Nice To Haves

At least 4 years of hands-on experience with information security tools and technologies.
At least 4 years of experience in a combination of database masking, database monitoring, or database vulnerabilities.
At least 4 years of experience in process definition, assessment, and documentation.
At least 4 years of Ansible experience.
At least 4 years of scripting experience using Java or PL-SQL.
IBM Security Guardium experience.
Splunk Architecture experience.
CISSP or CCSP certification.
Experience with Azure, AWS, or GCP.
Knowledge and understanding of Big Data.
Knowledge and understanding of application security planning and security architecture.
Knowledge and understanding of information security risk assessment or audit.
Experience with database authentication tools, database firewall, and encryption.
Experience with Azure services for database servers and instances.
Experience in Azure Arc hybrid and multi-cloud environments.
Understanding of cloud authentication (AWS and GCP) for managed database instances.
Good understanding of NIST and CIS Database Security standards.
Familiarity with data security frameworks and standards such as PCI, ITIL, COBIT, and ISO 27001.
Excellent verbal and written communication skills.
Advanced Information Security technical skills.
Ability to manage complex issues and develop solutions.

Responsibilities

Lead or participate in computer security incident response activities for moderately complex events.
Conduct technical investigations of security-related incidents and post-incident digital forensics to identify causes and recommend future mitigation strategies.
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information security policies and standards.
Design, document, test, and maintain moderately complex security solutions, and provide issue-resolution recommendations related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
Review and correlate security logs.
Apply subject matter knowledge of industry-leading security solutions and best practices across areas such as availability, integrity, confidentiality, risk management, threat identification and modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
Support applicable risk and compliance programs by following policies and procedures, fulfilling obligations, escalating and remediating issues, and making sound risk decisions.
Participate in proactive monitoring, governance, risk identification, and escalation.