Principal Engineer - Cyber Security Operations

Principal Engineer, Cybersecurity

Wells Fargo is seeking a Principal Engineer for our Cyber Security Operations team to serve as the senior technical authority for security operations. The position is responsible for leading and setting the strategy and direction for advanced cyber security incident response, threat detection, phishing and cybercrime response, and advanced adversarial response and mitigation for the company. This position will interact directly with Threat Detection Services, Security Content Development, Cyber Threat Fusion Center, Cyber Threat Management, and Offensive Security Research Team.

The ideal candidate will have experience in providing oversight to critical cyber security events and consulting executive leadership with the decisions related to business process, security controls, policies and standards, regulations and investment prioritization. The ideal candidate will have extensive experience in conducting research and identifying technologies to address capability gaps for emerging cyber threats, attack methods, and evolving Tactics, Techniques, and Procedures (TTPs). The ideal candidate should have extensive experience in providing oversight and guidance to a team in troubleshooting and resolving the most complex cyber security problems. The candidate should have experience with data analytic techniques, including machine learning, statistics and data mining to solve core business challenges. The position will require regular interface with external entities including law enforcement, intelligence, financial industry contacts and government organizations and agencies. Interaction with internal partners including legal, fraud, financial crimes, technology and line of business leaders and executives will be required.

Key Duties:

• Principal Engineer (SME/technical authority) for incident response, cybercrime, phishing, evolving threats, automation development, and advanced adversarial response and mitigation
• Implement machine learning and automation across the above areas
• Conduct strategy planning in the above areas for ICS
• Provide guidance and oversight to multiple teams within TDS, CTFC, and SCD (Security Operations)
• Engage with executive leadership across the lines of business to ensure technical solutions are in alignment with established priorities
• Create efficiency where it does not exist (via Machine Learning or Automation): Be three steps ahead of the company's needs, providing solutions that improve efficiency/scalability for years to come
• Force multiplier: Enable team through collaboration and technical solutions

In this role, you will:

• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions
• Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership

Required Qualifications, US:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of technical engineering experience
• 7+ years of Incident Response Protocols and Tools experience
• 7+ years of experience in information security risk management or information security technology

Desired Qualifications:

• 7+ years of information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
• 5+ years of Incident Management System experience
• Experience articulating issues, risks, and proposed solutions to various levels of staff and management
• Knowledge and understanding of threat analysis and assessment of potential and current information security risk/threats
• Experience with Security Information and Event Management (SIEM) products
• Certifications in one or more of the following: Global Information Assurance Certification (GIAC), Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Web Expert (OSWE)
• Ability to execute in a fast paced, high demand, environment while balancing multiple priorities
• Experience working in a large enterprise environment
• Knowledge and understanding of banking or financial services industry

Job Expectations:

• Ability to travel up to 10% of the time

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

$159,000.00 - $305,000.00