Senior Lead Cyber Security Research Consultant

Wells Fargo - Minneapolis, MN

Full-time - Senior

Minneapolis, MN

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Lead Cyber Security Research Consultant who will play a pivotal role in investigating existing types of malware, analyzing their capabilities, and predicting new forms of malware to develop appropriate security responses. This position involves overseeing the development of red teaming methods and solutions across various domains, including business continuity, emergency management, supply chain security, information security, personnel security, operations security, and facilities security. The consultant will be responsible for building a mentoring program for the red team and its partners, enhancing capabilities around threat emulation, malware and tool creation, and tradecraft. As a senior contributor to the Offensive Security Research Team, the consultant will provide subject matter expertise on offensive operations, operationalizing threat intelligence, tool development, and tradecraft. Collaboration with blue and purple team partners is essential to trigger incidents and improve detection effectiveness, fostering relationships among different groups. The consultant will also build and maintain a comprehensive model of relevant threats to the enterprise and educate senior management on the strengths, weaknesses, opportunities, and threats associated with strategic red teaming. Regular threat and risk briefings will be provided to senior management, presenting findings within the context of overall enterprise risk and adjusting red team activities based on management input. Additionally, the consultant will work closely with existing infrastructure and security teams to gather input and provide actionable intelligence, acting as an adversarial counterpoint to security strategy proposals. This role requires a deep understanding of cyber security principles and the ability to navigate complex stakeholder interests within the enterprise.

Responsibilities

• Oversee the development of red teaming methods and solutions across the enterprise.
• Build a mentoring program for the red team and its partners.
• Act as a senior contributor to the Offensive Security Research Team.
• Work closely with blue and purple team partners to trigger incidents and improve detection effectiveness.
• Build and maintain a comprehensive model of relevant threats to the enterprise.
• Educate senior management on the strengths, weaknesses, opportunities, and threats associated with strategic red teaming.
• Provide regular threat/risk briefings to senior management regarding red team issues.
• Adjust red team activities based on senior management input.
• Collaborate with existing infrastructure and security teams to provide actionable intelligence.
• Act as an adversarial counterpoint to security strategy proposals.

Requirements

• 7+ years of Cyber Security Research experience or equivalent through work experience, training, military experience, or education.
• 7+ years of experience in briefing senior level executives and key stakeholders around red team activities.
• 7+ years of information security reporting and analysis experience.
• 5+ years of experience in reporting, analytics, or modeling in an information security or IT environment.

Nice-to-haves

• 7 years of experience conducting red team assessments of high-consequence systems.
• Understanding of MITRE ATT&CK framework.
• Experience with Burp Suite, Crowdstrike, Splunk, Chronicle, EDR solutions.
• Thorough understanding of security concepts and principles related to strategy, management, and intelligence analysis.
• Ability to work productively with various stakeholders and build consensus for red teaming.
• Ability to think and act both strategically and tactically.
• OSCP certification or other similar related security certifications.
• GCP and Azure certifications.