Info Security Engineer 5

Wells Fargo - New York, NY

Job Description
At Wells Fargo, we want to satisfy our customers' financial needs and help them succeed financially. We're looking for talented people who will put our customers at the center of everything we do. We value and promote diversity and inclusion in all aspects of business and at all levels. Success comes from inviting and incorporating diverse perspectives.

Help us build a better Wells Fargo. It all begins with outstanding talent. It all begins with you.

Wells Fargo Technology sets IT strategy; enhances the design, development, and operations of our systems; optimizes the Wells Fargo infrastructure footprint; provides information security; and enables continuous banking access through in-store, online, ATM, and other channels to Wells Fargo’s more than 70 million global customers.

Since 1852, customers have trusted that Wells Fargo would keep their assets secure from theft and always available. Today, maintaining customer trust remains our underlying operating principle.

Information Security’s (IS) vision is to provide Wells Fargo world leading cyber security risk management. Through a framework that addresses policy, process, operations, people, and technology, IS protects Wells Fargo’s infrastructure, corporate data, and customer assets, and ensures alignment with applicable regulations and laws. IS is part of Wells Fargo's Technology organization and is led by the Chief Information Security Officer.

Job Description:
Our IS team is looking for a strong cyber security professional with extensive experience in software development and system administration to join our Incident Response Development team. This team serves as a software development and infrastructure team within the Cyber Defense and Monitoring group. The ideal candidate will have extensive experience in the following security disciplines and/or activities: network forensics, endpoint forensics, incident response, threat hunting, deep packet analysis, log analysis, system hardening, and offensive security.

The ideal candidate will additionally have extensive experience in the following software development and system administration disciplines and/or activities: software development lifecycle methodologies, object oriented programming, functional programming, compiled languages, scripting languages, REST API usage, windows API usage, cross platform development, relational database systems, windows server administration, Linux administration, debugging, troubleshooting, automated build systems, technical documentation, secure coding practices, software testing, ticketing systems, and training. Regular collaboration with multiple teams such as the Cyber Threat Fusion Center, Security Content Development, Cyber Threat Intelligence, and Offensive Security teams will be critical to success.

Note: Charlotte, NC is the preferred work location but will consider other core Wells Fargo locations.

Required Qualifications

7+ years of information security applications and systems experience
2+ years of product development experience
2+ years of experience with scripting languages such as Bash, PowerShell, Python, Shell, VBScript, or JavaScript

Desired Qualifications

Advanced Information Security technical skills and understanding of information security practices and policies
Ability to manage complex issues and develop solutions
Excellent verbal and written communication skills

Other Desired Qualifications
Hands-on experience with information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devices
Experience with host and/or network log analysis as applied to incident response / threat hunting
Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents
Strong ability to identify anomalous behavior on endpoint devices and/or network communications
Strong experience in operating system and application security hardening and best practices
Strong investigative mindset with an attention to detail
Experience with multiple operating systems to include Windows, Mac OS, and Unix/Linux
Advanced problem solving skills, ability to develop effective long-term solutions to complex problems
Certifications in one or more of the following: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Reverse Engineering Malware (GREM), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensics Analyst (GNFA), Offensive Security (OSCP/OSCE/etc), or other relevant certifications.
Ability to manage complex issues and develop solutions
3+ years of Incident Response Protocols and Tools experience
2+ years of secure SDLC (System Development Life Cycle) methodologies experience
2+ years of relational database experience
2+ years of database design experience
2+ years of JavaScript development experience
2+ years of Object Oriented Programming (OOP) experience
2+ years of C# experience
2+ years of version control system experience
IIS, Apache, or nginx experience
Experience with Security Orchestration and Automated Response (SOAR) tools
Experience with automated build and continuous integration tools
Experience with multiple operating systems to include Windows, Mac OS, and Unix/Linux
Experience working in a large enterprise environment
Ability to interact and communicate effectively with all levels of an organization; including at the executive level

Job Expectations

Ability to travel up to 10% of the time

Street Address
NC-Charlotte: 1525 W Wt Harris Blvd - Charlotte, NC
MN-Minneapolis: 255 2nd Ave S - Minneapolis, MN
AZ-Chandler: 2600 S Price Rd - Chandler, AZ
CA-SF-Financial District: 420 Montgomery - San Francisco, CA
NC-Winston Salem: 100 N Main St - Winston Salem, NC
NY-New York: 150 E 42nd St - New York, NY
NJ-North Brunswick: 100 Fidelity Plz - North Brunswick, NJ
IA-West Des Moines: 7001 Westown Pkwy - West Des Moines, IA
TX-Irving: 2975 Regent Blvd - Irving, TX
VA-Glen Allen: 4340 Innslake Dr - Glen Allen, VA
PA-Philadelphia: 101 N Independence Mall E - Philadelphia, PA
CO-Denver: 1740 Broadway - Denver, CO


All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.

Relevant military experience is considered for veterans and transitioning service men and women.

Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.