Senior Cyber Security Research Consultant

Wells Fargo - Charlotte, NC

Full-time - Senior

Charlotte, NC

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Cyber Security Research Consultant to join our Cyber Security team, which is dedicated to providing world-leading cyber security risk management. This role is pivotal in ensuring the protection of Wells Fargo's infrastructure, corporate data, and customer assets while aligning with applicable regulations and laws. The successful candidate will be part of the Offensive Security Research Team (Red Team), focusing on assessing both cloud-based and on-premise deployments for security gaps in configuration and implementation. This position requires a deep understanding of data storage, access, and management, and is responsible for leading and executing comprehensive security assessments from start to finish. In this senior role, you will have the opportunity to contribute to and collaborate on assessments of mission-critical cloud deployments that enable the daily operations of a large enterprise at scale. You will lead initiatives that encompass the research, analysis, design, testing, and implementation of complex computer network security and protection technologies for the company's information and network systems and applications. As a professional ethical penetration tester, you will utilize hacking tools to modify or create proof of concept exploits that mimic the techniques of sophisticated attackers. Your expertise will be crucial in reviewing and analyzing advanced computer security incident response activities and technical investigations related to information security incidents. You will identify vulnerabilities, assign severity ratings based on impact and ease of exploit, and conduct security risk assessments to ensure compliance with corporate information security policies and best practices. Effective communication with the line of business regarding inherent risks and providing meaningful mitigation strategies will be essential. Additionally, you will provide leadership to principal engineers and support special projects while collaborating with peers, colleagues, and managers to resolve issues and achieve goals.

Responsibilities

• Lead initiatives including the research, analysis, design, testing and implementation of complex computer network security and protection technologies.
• Act as a professional ethical penetration tester utilizing hacking tools to modify or create proof of concept exploits.
• Review and analyze complex advanced computer security incident response activities and technical investigations.
• Identify vulnerabilities and associate those to a severity rating by deriving impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies and best practices.
• Communicate to the line of business on the inherent risks, providing meaningful mitigation strategies.
• Provide leadership to principal engineers and support special projects.
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals.

Requirements

• 4+ years of Cyber Penetration testing experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 3+ years of Cloud Security experience (Kubernetes, Docker).
• 2+ years of Agile and SecDevOps experience.
• 2+ years of Application Security experience.

Nice-to-haves

• 2+ years of Cyber Threat Intelligence experience.
• 2+ years of Mainframe Security experience.

Benefits

• Hybrid work schedule
• Diversity, equity, and inclusion initiatives
• Drug and alcohol-free workplace policy