Senior Information Security Engineer
Wells Fargo22 hours ago
Columbus, OH, USA +4 moreSenior
Base Salary
$100k - $179k/yr
Responsibilities
- Design and implement repeatable, scalable, and automated application security processes.
- Provide hands-on technical leadership for AppSec tooling integration, automation, process execution, and CI/CD control integration.
- Enhance and fine-tune internal and vendor security products to improve application security defect identification and prioritization.
- Manage tooling upgrades, resiliency, continuity, and compliance with enterprise standards.
- Recommend mitigation strategies for application security risks and support AppSec reporting.
- Represent AppSec in governance and technical forums and collaborate with control management and cybersecurity leadership on new security controls.
- Support internal and external audits, regulatory reviews, and third-party assessments.
- Use AI-assisted development and analysis tools for design, coding, testing, analysis, and troubleshooting while accounting for limitations, risks, and compliance requirements.
Requirements
- 4+ years of Information Security Engineering experience or equivalent demonstrated through work experience, training, military experience, or education.
- Expertise in SAST, DAST, SCA, secrets management and detection, and Infrastructure as Code.
- Strong experience integrating SAST, DAST, and SCA tools into SDLC workflows and source code repositories.
- Advanced knowledge of GitHub, Jira, ServiceNow, Jenkins, Harness, and CI/CD ecosystems.
- Strong understanding of OWASP standards and MITRE CVE/CWE frameworks.
- Experience implementing and maturing Secure Software Development Lifecycle practices across Agile and custom development frameworks.
- Familiarity with AI/LLM-enabled development tooling, auto-remediation capabilities, and related governance considerations.
- 4+ years of development experience in more than one language.
- 3+ years using IaC to configure, build, and deploy, plus 2+ years of DevSecOps or automation experience.
- Hands-on experience with vendor tools including Checkmarx, Black Duck, Prisma, TruffleHog, Snyk, Socket, Invicti, and Qualys.
- Experience with GitHub Advanced Security and secret scanning capabilities.
- Experience in API development and custom services.
Benefits
- Hybrid work schedule.
- Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, and accident insurance.
- Parental leave, critical caregiving leave, commuter benefits, tuition reimbursement, dependent-child scholarships, adoption reimbursement, and discounts and savings.
Tech Stack
HarnessJenkins
Categories
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.