Senior Lead Cyber Security Research Consultant

Wells Fargo - San Antonio, TX

Full-time - Senior

San Antonio, TX

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Senior Lead Cyber Security Research Consultant to investigate existing types of malware, analyze their capabilities, and predict new forms of malware to develop appropriate security responses. This role involves overseeing red teaming methods, mentoring team members, and collaborating with various security teams to enhance threat detection and response strategies.

Responsibilities

• Oversee the development of red teaming methods and solutions across the enterprise.
• Build a mentoring program for the red team and its partners.
• Act as a senior contributor to the Offensive Security Research Team.
• Work closely with blue and purple team partners to trigger incidents and improve detection effectiveness.
• Build and maintain a comprehensive model of relevant threats to the enterprise.
• Educate senior management on the strengths, weaknesses, opportunities, and threats associated with strategic red teaming.
• Provide regular threat/risk briefings to senior management regarding red team findings.
• Collaborate with existing infrastructure and security teams to provide actionable intelligence.
• Act as an adversarial counterpoint to security strategy proposals.

Requirements

• 7+ years of Cyber Security Research experience or equivalent.
• 7+ years of experience in briefing senior level executives on red team activities.
• 7+ years of information security reporting and analysis experience.
• 5+ years of experience in reporting, analytics, or modeling in an information security or IT environment.

Nice-to-haves

• 7 years of experience conducting red team assessments of high-consequence systems.
• Understanding of MITRE ATT&CK framework.
• Experience with Burp Suite, Crowdstrike, Splunk, Chronicle, EDR solutions.
• Thorough understanding of security concepts and principles.
• Ability to work productively with various stakeholders.
• Ability to build consensus for red teaming within the enterprise.
• Ability to think and act strategically and tactically.
• OSCP certification or similar security certifications.
• GCP and Azure certifications.

Benefits

• Hybrid work schedule