Lead Information Security Engineer - Web Application Security

Wells Fargo is seeking a Lead Information Security Engineer to support the Inbound Web Application Security team. This hybrid role in Columbus, OH focuses on audit and control support alongside security engineering for highly complex web application security solutions, with a scope that spans consulting, security log review, and security risk evaluation.

In this position, you will contribute to security engineering work that covers networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security. The role also includes coordinating issue resolution recommendations and partnering with professionals across organizational levels.

Role focus

• Provide security consulting on large projects for internal clients to support alignment with corporate information security policy and standards.
• Design, document, test, and maintain highly complex security solutions, including delivering issue resolution recommendations.
• Review and correlate security logs to support security monitoring and validation efforts.
• Apply subject matter expertise to implement security components such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
• Identify vulnerabilities and security issues, complete risk assessments, and evaluate remediation alternatives.
• Collaborate and influence professionals at all levels, including managers.

Experience and background

• 5+ years of Information Security Engineering experience, or an equivalent combination of work experience, training, military experience, and/or education.
• 5+ years of experience in an enterprise environment.

Technologies and tools

• ServiceNow
• Akamai
• Cloudflare
• Jira
• Confluence

Additional desired qualifications

• Layer 7 web security experience (Bot, API, L7 DDoS, WAF).
• Advanced knowledge of HTTP/S.
• ServiceNow experience.
• Experience with vendors such as Akamai and/or Cloudflare, including content delivery network experience.
• Familiarity with DNS and Load Balancing.
• Technical documentation experience; experience with Jira and Confluence.
• Strategic planning experience translating leadership vision into executable strategies and initiatives.
• Technology experience in the Financial Services sector.
• Ability to coordinate completion of multiple tasks and meet aggressive timelines.
• Advanced critical thinking, problem solving, and technical troubleshooting abilities.
• Strong analytical skills with a high attention to detail and accuracy.
• Ability to thrive in a complex, fast-paced technology and/or information security organization within a large enterprise environment.

Work location and schedule

• Location: Columbus, OH (hybrid)
• Ability to work off hours and occasional weekends to support change activities.

Compensation and job details

• Salary range: USD 119,000 to 187,000 per year.
• Posting end date: 29 Oct 2026.
• Visa sponsorship: not eligible.
• Relocation assistance: not available.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Policy and recruitment notes

• Applicants with disabilities: To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.
• Drug and alcohol policy: Wells Fargo maintains a drug-free workplace.
• Third-party recordings are prohibited unless authorized by Wells Fargo.
• Direct representation requirement: Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.