Senior Cyber Security Research Consultant

Wells Fargo - Minneapolis, MN

Full-time - Senior

Minneapolis, MN

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Cyber Security Research Consultant to join our Cyber Security team, which is dedicated to providing world-leading cyber security risk management. This role is pivotal in protecting Wells Fargo's infrastructure, corporate data, and customer assets while ensuring compliance with applicable regulations and laws. The successful candidate will be part of the Offensive Security Research Team (Red Team), focusing on assessing both cloud-based and on-premise deployments for security vulnerabilities. This position requires a deep understanding of data management, storage, and access, and is responsible for leading and executing comprehensive security assessments from start to finish. The role offers opportunities to contribute to assessments of mission-critical cloud deployments that support the daily operations of a large enterprise at scale. As a Senior Cyber Security Research Consultant, you will lead initiatives that encompass the research, analysis, design, testing, and implementation of advanced computer network security technologies. You will act as a professional ethical penetration tester, utilizing hacking tools to create proof of concept exploits that simulate sophisticated attack techniques. Your responsibilities will include reviewing and analyzing complex security incidents, identifying vulnerabilities, conducting security risk assessments, and communicating inherent risks to the business with actionable mitigation strategies. You will also provide leadership to principal engineers and support special projects while collaborating with peers and managers to resolve issues and achieve organizational goals.

Responsibilities

• Lead initiatives including the research, analysis, design, testing and implementation of complex computer network security technologies.
• Act as a professional ethical penetration tester utilizing hacking tools to create proof of concept exploits.
• Review and analyze advanced computer security incident response activities and investigations.
• Identify vulnerabilities and assign severity ratings based on impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies.
• Communicate inherent risks to the line of business and provide meaningful mitigation strategies.
• Provide leadership to principal engineers and support special projects.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.

Requirements

• 4+ years of Cyber Penetration testing experience or equivalent through work experience, training, military experience, or education.
• 3+ years of Cloud Security experience (Kubernetes, Docker).
• 2+ years of Agile and SecDevOps experience.
• 2+ years of Application Security experience.

Nice-to-haves

• 2+ years of Cyber Threat Intelligence experience.
• 2+ years of Mainframe Security experience.

Benefits

• Hybrid work schedule
• Diversity, equity, and inclusion initiatives
• Drug and alcohol-free workplace policy