Senior Cyber Security Research Consultant

Wells Fargo - Charlotte, NC

Full-time - Senior

Charlotte, NC

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Cyber Security Research Consultant to join our Cyber Security team, which is dedicated to providing world-leading cyber security risk management. Our vision encompasses a comprehensive framework that addresses policy, process, operations, people, and technology to protect Wells Fargo's infrastructure, corporate data, and customer assets while ensuring compliance with applicable regulations and laws. The successful candidate will be part of the Offensive Security Research Team (Red Team), focusing on assessing both cloud-based and on-premise deployments for security vulnerabilities in configuration and implementation. This senior role requires a deep understanding of data storage, access, and management, and is responsible for leading and executing security assessments from start to finish. The position offers opportunities to contribute to assessments of mission-critical cloud deployments that support the daily operations of a large enterprise at scale. The role reports to the Offensive Security Research Team and collaborates closely with cyber defense partners in a purple team capacity.

Responsibilities

• Lead initiatives including the research, analysis, design, testing, and implementation of complex computer network security and protection technologies for company information and network systems and applications.
• Act as a professional ethical penetration tester utilizing hacking tools to modify or create proof of concept exploits that mimic techniques of sophisticated attackers.
• Review and analyze complex advanced computer security incident response activities and technical investigations of information security-related incidents.
• Identify vulnerabilities and associate those to a severity rating by deriving impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies and adherence to best practices.
• Communicate to the line of business on the inherent risks, providing meaningful mitigation strategies.
• Provide leadership to principal engineers and support special projects.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.

Requirements

• 4+ years of Cyber Penetration testing experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 3+ years of Cloud Security experience (Kubernetes, Docker).
• 2+ years of Agile and SecDevOps experience.
• 2+ years of Application Security experience.

Nice-to-haves

• 2+ years of Cyber Threat Intelligence experience.
• 2+ years of Mainframe Security experience.