Senior Information Security Engineer
Wells Fargo4 days ago
Columbus, OH, USA +4 moreSenior
Base Salary
$100k - $179k/yr
Responsibilities
- Design and implement repeatable, scalable, and automated Application Security processes.
- Integrate and operate SAST, DAST, SCA, secrets detection, and AppSec controls across enterprise tools, source code repositories, SDLC workflows, and CI/CD pipelines.
- Fine-tune security rules and enhance internal and vendor products to improve identification and prioritization of application security defects.
- Provide hands-on technical leadership for tooling integration, automation, process execution, upgrades, resiliency, continuity, and enterprise compliance.
- Recommend mitigation strategies for application security risks and collaborate on new security controls.
- Represent AppSec in cross-functional governance and technical forums.
- Report AppSec process execution, status, and outcomes.
- Support internal and external audits, regulatory reviews, and third-party assessments.
- Use AI-assisted tools to accelerate design, coding, testing, analysis, and troubleshooting while validating outputs and applying security, compliance, privacy, and ethical standards.
Requirements
- At least 4 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
- Expertise in SAST, DAST, SCA, secrets management and detection, and Infrastructure as Code.
- Strong experience integrating SAST, DAST, and SCA tools into SDLC workflows and source code repositories.
- Advanced knowledge of GitHub, Jira, ServiceNow, Jenkins, Harness, and CI/CD ecosystems.
- Strong understanding of OWASP standards and MITRE CVE/CWE frameworks.
- Experience implementing and maturing Secure Software Development Lifecycle practices across Agile and custom development frameworks.
- Familiarity with AI/LLM-enabled development tooling, auto-remediation capabilities, and governance considerations.
- Preferred: at least 4 years of development experience in more than one language.
- Preferred: at least 3 years configuring, building, and deploying with Infrastructure as Code.
- Preferred: at least 2 years of DevSecOps or automation experience.
- Preferred: hands-on experience with vendor tools including Checkmarx, Black Duck, Prisma, TruffleHog, Snyk, Socket, Invicti, and Qualys.
- Preferred: experience with GitHub Advanced Security and secret scanning capabilities.
- Preferred: experience developing APIs and custom services.
Benefits
- Hybrid work schedule.
- Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, accident insurance, parental leave, and critical caregiving leave.
- Discounts and savings, commuter benefits, tuition reimbursement, scholarships for dependent children, and adoption reimbursement.
- The position is not eligible for visa sponsorship.
- Posting end date is November 12, 2026, though the posting may close early due to applicant volume.
Tech Stack
HarnessJenkins
Categories
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.