Senior Lead Application Pen Testing Cybersecurity Research Engineer

Wells Fargo Bank•Irving, TX

1d•Hybrid

About The Position

Wells Fargo is seeking a highly skilled and experienced Senior Lead Application Pen Testing Cyber Security Research Engineer to join the Application Penetration Testing department. This technical leadership role will be responsible for advancing and integrating penetration testing practices across all phases of the software development lifecycle. The ideal candidate will bring deep expertise in security testing methodologies, artificial intelligence, offensive security tooling, and hands-on penetration testing. In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: Lead the development of application penetration testing methods and solutions across a broad range of technology stacks. Establish a mentoring program for the application penetration testing team and key partners to strengthen capabilities in offensive AI, scanning, and security research. Advise senior management on the strengths, weaknesses, opportunities, and risks associated with penetration testing. Serve as an adversarial counterpoint to security strategy proposals, helping identify gaps, assumptions, and potential areas of risk. Maintain awareness of industry best practices and emerging techniques to continuously enhance security testing capabilities. Mentor junior team members and promote a culture of security awareness throughout the organization. Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents) Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions Understand and account for model limitations, security risks, and operational considerations Apply AI responsibly in development and production environments Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Requirements

7+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Nice To Haves

Burp Suite Certified Professional, OSCP certification or other similar related security certifications
GCP and Azure certifications
Deep expertise in application penetration testing, offensive security research, and adversary emulation
Experience building security tools, automation, or offensive security frameworks using modern programming languages
Experience assessing AI/ML systems, Generative AI applications, LLM security risks, prompt injection, model misuse, and AI red teaming techniques
Strong stakeholder management and executive communication skills with the ability to influence senior leaders across large organizations
Experience mentoring and developing security testing teams in highly regulated environments

Responsibilities

Lead the development of application penetration testing methods and solutions across a broad range of technology stacks.
Establish a mentoring program for the application penetration testing team and key partners to strengthen capabilities in offensive AI, scanning, and security research.
Advise senior management on the strengths, weaknesses, opportunities, and risks associated with penetration testing.
Serve as an adversarial counterpoint to security strategy proposals, helping identify gaps, assumptions, and potential areas of risk.
Maintain awareness of industry best practices and emerging techniques to continuously enhance security testing capabilities.
Mentor junior team members and promote a culture of security awareness throughout the organization.
Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions
Understand and account for model limitations, security risks, and operational considerations
Apply AI responsibly in development and production environments
Ensure AI usage aligns with security, compliance, privacy, and ethical standards