Wells Fargo - New York, NY
posted 2 months ago
Full-time - Mid Level
Onsite - New York, NY
Credit Intermediation and Related Activities
About the position
Wells Fargo is seeking a Lead Information Security Engineer to join the Chief Technology Office. This role involves providing technical leadership and individual contribution to teams focused on encryption, tokenization, and key management technologies. The selected candidate will work on cutting-edge cryptographic products and services, ensuring their design, deployment, and operational maintenance across various environments.
Responsibilities
- Drive design, deployment and automation strategies for encryption, tokenization and key management products and services.
- Provide technical guidance and oversight to teams responsible for product delivery and operational maintenance.
- Develop and maintain documentation including design and build guides, deployment strategies, automation guides and operational processes.
- Participate in research, analysis and evaluation of new cryptographic products and services.
- Participate in Proof of Concept (POC) testing and demonstrations for new cryptographic products and services.
- Support company driven audits, gather evidence of compliance to company policies, and drive product enhancements to remediate findings.
- Conduct technical investigation of incidents to identify causes and recommend future mitigation strategies.
- Collaborate across Wells Fargo teams to ensure cryptographic products are compliant with company policies.
- Work with vendors to understand technology roadmaps and influence enhancements to meet Wells Fargo's needs.
- Work with partner engineering teams on identification and remediation of security vulnerabilities and conduct risk assessments of infrastructure.
- Support incident response, root cause analysis and corrective action activities.
- Oversee a team of engineers and influence design/architecture decisions regarding encryption infrastructure.
Requirements
- 5+ years of Information Security Engineering experience.
- 4+ years of scripting/automation experience using tools such as Bash, PowerShell, Python, Ansible, VBScript, or JavaScript.
- 4+ years of Linux and Windows server experience.
- 3+ years of experience with encryption or tokenization and key management technologies.
- 3+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices.
- 3+ years of advanced knowledge of Cryptographic protocols & algorithms.
- 3+ years of experience with Format Preserving Encryption (FPE), tokenization and Transparent Data Encryption (TDE).
- 3+ years of experience designing solutions for Data at Rest encryption using Thales Vormetric DSM and CipherTrust Manager appliances.
Nice-to-haves
- Experience with DevOps and CI/CD automated build and deployment processes.
- Advanced scripting skills specifically around log rotation, data collection, error collection and alerting.
- Experience designing, developing, and implementing synthetic transactions for monitoring applications and/or infrastructure.
- Experience with Puppet/Chef/Ansible or similar automation tools.
- Experience with Agile Scrum or Kanban methodologies.
- Public cloud engineering or support experience.
- Application development experience.
- Experience with application support in Linux and Windows server environments.
- Experience performing technical product assessments in a large enterprise.
- Experience mentoring/guiding less experienced staff.
- Strong analytical skills with high attention to detail and accuracy.
- Advanced critical thinking, problem solving and technical troubleshooting abilities.
- Security certifications such as CISSP, GIAC or equivalent.
- Cloud certifications such as AZ-900, MS-900 or equivalent/higher.
- Knowledge of implementing infrastructure upgrades, security patches, or version upgrades.
- Knowledge of Splunk.
- Knowledge of banking or the financial services industry.
Benefits
- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
