Lead Information Security Engineer - Hardware Security Modules

Wells Fargo - Irving, TX

Full-time

Onsite - Irving, TX

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a motivated Lead Information Security Engineer to join a fast-paced team focused on cutting-edge encryption, tokenization, and key management technologies. This role involves providing technical leadership and individual contribution to the design, deployment, and operational maintenance of cryptographic products and services, including Hardware Security Modules (HSMs) and security appliances.

Responsibilities

• Provide technical guidance and oversight to teams responsible for product delivery and operational maintenance.
• Develop and maintain documentation including design and build guides, deployment strategies, automation guides, and operational processes.
• Participate in research, analysis, and evaluation of new cryptographic products and services.
• Participate in Proof of Concept (POC) testing and demonstrations for new cryptographic products and services.
• Support company-driven audits, gather evidence of compliance to company policies, and drive product enhancements to remediate findings.
• Conduct technical investigations of incidents to identify causes and recommend future mitigation strategies.
• Collaborate with compliance, security architecture, and security evaluation teams to ensure cryptographic products comply with company policies.
• Work with vendors to understand their technology roadmap and ensure requests for enhancements meet Wells Fargo's needs.
• Work with partner engineering teams on identifying and remediating security vulnerabilities and conduct risk assessments of infrastructure.
• Support incident response, root cause analysis, and corrective action activities.
• Oversee a team of engineers and influence design/architecture decisions regarding encryption infrastructure.
• Ensure design decisions consider blast radius and business resiliency requirements.

Requirements

• 5+ years of Information Security Engineering experience or equivalent through work experience, training, military experience, or education.
• 3+ years of experience with encryption, tokenization, and/or key management technologies.
• 3+ years of experience working with hardware security modules (HSMs) or security appliance devices.

Nice-to-haves

• Understanding of data at rest and data in motion encryption fundamentals.
• Financial services industry experience.
• Experience with design and implementation of resilient, scalable, and efficient solutions for HSMs and/or security appliance devices.
• Experience performing technical product assessments in a large enterprise.
• Experience with DevOps and CI/CD automated build and deployment processes.
• Intermediate to advanced level experience with scripting/automation using tools.
• Experience with Linux or Windows server and operating systems.
• Knowledge and understanding of logging and monitoring tools.
• Proven experience with change and incident management practices in medium to large enterprise environments.
• Security certifications such as CISSP, GIAC or equivalent.
• Experience with Public cloud engineering.