Sr. Information Security Engineer DLP Technical Governance

Wells Fargo & Company•McLean, VA

3d•$100,000 - $196,000•Hybrid

About The Position

About the Role Wells Fargo is seeking a Senior Information Security Engineer to support and mature the Data Loss Prevention (DLP) risk management and governance program. In this role, you will collaborate across large matrixed teams to execute cybersecurity controls, policies, and standards with a specific emphasis on DLP. You will leverage your technical expertise to provide analysis, risk reporting, and mitigation planning in partnership with cybersecurity and business stakeholders. In this role, you will: Lead or participate in computer security incident response activities for moderately complex events. Conduct technical investigations of security-related incidents, including post-incident digital forensics, to determine root causes and recommend future mitigation strategies. Provide security consulting on medium-sized projects to ensure alignment with corporate information security policies and standards. Design, document, test, maintain, and offer resolution recommendations for moderately complex security solutions across networking, cryptography, cloud, authentication, directory services, email, internet, application, and endpoint security domains. Review, analyze, and correlate security logs to identify trends, gaps, and indicators of compromise. Apply subject matter expertise in industry-leading security solutions and best practices to implement components of the information security program, including availability, integrity, confidentiality, risk management, threat modeling, monitoring, incident response, access management, and business continuity. Identify security vulnerabilities and issues, conduct risk assessments, and evaluate remediation options. Collaborate and consult with peers, colleagues, and managers to resolve issues, improve processes, and achieve team and organizational goals.

Requirements

4+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.

Nice To Haves

Advanced experience and knowledge of Cybersecurity Risk Management.
Advanced experience and knowledge of Data Loss Prevention (DLP) solutions and techniques.
Advanced understanding of Governance, Risk, and Compliance (GRC).
2+ years leading stakeholder teams to design and develop internal and external threat mitigation strategies, including threat modeling, data analytics, and visualization.
2+ years working with DLP solutions for data at rest and data in transit.
2+ years of experience in reporting, analytics, or modeling within an information security or IT environment.
2+ years of experience with security frameworks and standards such as FFIEC, NIST, and ISO.
2+ years of experience with information security domains, including data, cryptography, IAM, network, platform, or application security.
2+ years of experience with cloud implementations in regulated enterprise environments.

Responsibilities

Lead or participate in computer security incident response activities for moderately complex events.
Conduct technical investigations of security-related incidents, including post-incident digital forensics, to determine root causes and recommend future mitigation strategies.
Provide security consulting on medium-sized projects to ensure alignment with corporate information security policies and standards.
Design, document, test, maintain, and offer resolution recommendations for moderately complex security solutions across networking, cryptography, cloud, authentication, directory services, email, internet, application, and endpoint security domains.
Review, analyze, and correlate security logs to identify trends, gaps, and indicators of compromise.
Apply subject matter expertise in industry-leading security solutions and best practices to implement components of the information security program, including availability, integrity, confidentiality, risk management, threat modeling, monitoring, incident response, access management, and business continuity.
Identify security vulnerabilities and issues, conduct risk assessments, and evaluate remediation options.
Collaborate and consult with peers, colleagues, and managers to resolve issues, improve processes, and achieve team and organizational goals.