Senior Cyber Security Research Consultant

Wells Fargo - Westlake, TX

Full-time - Senior

Westlake, TX

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Cyber Security Research Consultant to join our Cyber Security team, which is dedicated to providing world-leading cyber security risk management. The vision of our Cyber Security division is to protect Wells Fargo's infrastructure, corporate data, and customer assets while ensuring compliance with applicable regulations and laws. This role is part of the Offensive Security Research Team (Red Team) and is crucial in assessing both cloud-based and on-premise deployments for security gaps in configuration and implementation. As a Senior Cyber Security Research Consultant, you will be responsible for leading and executing security assessments from end to end. This includes conducting research, analysis, design, testing, and implementation of complex computer network security technologies. You will act as a professional ethical penetration tester, utilizing advanced hacking tools to create proof of concept exploits that simulate the techniques of sophisticated attackers. Your expertise will be essential in reviewing and analyzing advanced computer security incidents and providing meaningful mitigation strategies to the line of business. In this senior role, you will also identify vulnerabilities, assess their severity, and conduct security risk assessments to ensure compliance with corporate information security policies. Collaboration with peers, colleagues, and managers will be key to resolving issues and achieving goals. Opportunities for contributing to assessments of mission-critical cloud deployments will be available, enabling the day-to-day activities of a large enterprise at scale. This position reports to the Offensive Security Research Team and works closely with cyber defense partners in a purple team capacity.

Responsibilities

• Lead initiatives including the research, analysis, design, testing and implementation of complex computer network security technologies.
• Act as a professional ethical penetration tester utilizing hacking tools to create proof of concept exploits.
• Review and analyze advanced computer security incident response activities and investigations.
• Identify vulnerabilities and associate them with a severity rating based on impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies.
• Communicate inherent risks to the line of business and provide meaningful mitigation strategies.
• Provide leadership to principal engineers and support special projects.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.

Requirements

• 4+ years of Cyber Penetration testing experience or equivalent through work experience, training, military experience, or education.
• 3+ years of Cloud Security experience (Kubernetes, Docker).
• 2+ years of Agile and SecDevOps experience.
• 2+ years of Application Security experience.

Nice-to-haves

• 2+ years of Cyber Threat Intelligence experience.
• 2+ years of Mainframe Security experience.