Senior Cyber Security Research Consultant

Wells Fargo - Chandler, AZ

Full-time - Senior

Chandler, AZ

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Cyber Security Research Consultant to join our Cyber Security team, which is dedicated to providing world-leading cyber security risk management. This role is pivotal in protecting Wells Fargo's infrastructure, corporate data, and customer assets while ensuring compliance with applicable regulations and laws. The successful candidate will be part of the Offensive Security Research Team (Red Team), focusing on assessing both cloud-based and on-premise deployments for security gaps in configuration and implementation. This position requires a deep understanding of data storage, access, and management, and is responsible for leading and executing security assessments from end to end. In this senior role, you will lead initiatives that encompass the research, analysis, design, testing, and implementation of complex computer network security and protection technologies for the company's information and network systems. You will act as a professional ethical penetration tester, utilizing advanced hacking tools to create proof of concept exploits that simulate the techniques of sophisticated attackers. Additionally, you will review and analyze complex advanced computer security incident response activities and conduct technical investigations of information security-related incidents. Your responsibilities will also include identifying vulnerabilities, conducting security risk assessments, and communicating inherent risks to the line of business while providing meaningful mitigation strategies. Collaboration is key in this role, as you will work closely with peers, colleagues, and managers to resolve issues and achieve goals. You will also provide leadership to principal engineers and support special projects, ensuring that the Cyber Security team remains at the forefront of industry standards and practices.

Responsibilities

• Lead initiatives including the research, analysis, design, testing, and implementation of complex computer network security technologies.
• Act as a professional ethical penetration tester utilizing hacking tools to create proof of concept exploits.
• Review and analyze complex advanced computer security incident response activities.
• Identify vulnerabilities and associate them with a severity rating based on impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies.
• Communicate inherent risks to the line of business and provide meaningful mitigation strategies.
• Provide leadership to principal engineers and support special projects.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.

Requirements

• 4+ years of Cyber Penetration testing experience or equivalent through work experience, training, military experience, or education.
• 3+ years of Cloud Security experience (Kubernetes, Docker).
• 2+ years of Agile and SecDevOps experience.
• 2+ years of Application Security experience.

Nice-to-haves

• 2+ years of Cyber Threat Intelligence experience.
• 2+ years of Mainframe Security experience.

Benefits

• Hybrid work schedule.
• Diversity, equity, and inclusion initiatives.
• Support for ongoing education and skill development.