Senior information Security Engineer

Wells Fargo is seeking a Senior Information Security Engineer in Technology to support the Cyber Threat Fusion Center. This onsite role focuses on security operations and investigation, including incident response, digital forensics, security solution design, and analytics through log review and correlation. The position also includes responsible use of AI-assisted development and analysis tools.

Key Responsibilities

• Lead or participate in computer security incident response activities for moderately complex events.
• Perform technical investigations of security incidents, including post-incident digital forensics, to identify root causes and recommend future mitigation strategies.
• Provide security consulting on medium projects for internal clients to ensure alignment with corporate information security requirements, security policy, and standards.
• Design, document, test, and maintain moderately complex security solutions, and provide issue resolution recommendations across areas such as networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security.
• Review and correlate security logs to support detection and investigation.
• Apply subject matter knowledge of industry-leading security solutions and best practices to implement components that support availability, integrity, confidentiality, risk management, threat identification, threat modeling, monitoring, incident response, access management, and business continuity.
• Identify security vulnerabilities and issues, conduct risk assessments, and evaluate remediation alternatives.
• Collaborate with peers, colleagues, and managers to resolve issues and achieve organizational goals.
• Use AI-assisted development and analysis tools (such as GitHub Copilot and approved code-centric agents) to accelerate system design, coding, testing, analysis, and troubleshooting.
• Validate and integrate AI-assisted outputs using strong technical judgment, accounting for model limitations, security risks, and operational considerations.
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards in both development and production environments.

Required Qualifications

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of work experience, training, military experience, and education.

Technologies and Tools

• GitHub Copilot
• Azure, Office 365
• Cloud technologies
• Endpoint Detection and Response (EDR) product(s)
• Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) product(s)
• GCP, AWS
• AI-assisted development and analysis tools
• Approved code-centric agents

Desired Qualifications

• 3+ years of experience with Endpoint Detection and Response (EDR) product(s).
• 3+ years of experience with Incident Response Protocols and Tools.
• 3+ years of experience with SIEM and SOAR product(s).
• 1+ years of experience with Azure, Office 365, or Cloud technologies.
• Knowledge of security analytics, including incident response and a digital forensics discipline.
• Knowledge of data security controls such as malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, endpoint detection and response, and log management solutions.
• Knowledge of the banking or financial services industry.
• Experience with host and/or network log analysis as applied to incident response and threat hunting.
• Knowledge of offensive security, including the ability to think like an adversary when hunting and responding to incidents.
• Knowledge of security analytics including incident response and Identity Access Management.
• Certifications in one or more of: GIAC, OSCP, OSWP, OSCE, OSEE, OSWE.
• Cloud certifications such as GCP or AWS.
• Experience in a 24 x 7 x 365 global security operations center environment.

Work Location and Job Expectations

Location: Charlotte, NC 28202 (onsite).

• Ability to work nights, weekends, and/or holidays as needed or scheduled.
• Flexibility to work in a 24/7 environment, including weekends and holidays.