Job Description

Senior Information Security Engineer

Wells Fargo is seeking a Senior Information Security Engineer to join our Cloud Workload Lifecycle Security (CWLS) team, within the Cybersecurity - Cloud Security organization. Be a part of one of the core teams working on Wells Fargo's digital transformation! Join our dynamic, diverse, fast-paced team environment where we secure and reduce risk for companywide cloud migrations. This is your opportunity to help shape Cybersecurity controls and capabilities for Wells Fargo's current and future hybrid cloud hosting environment. The position reports directly to the Business Execution Director of the Cloud Security - CWLS team. The position will, alongside mid-to-senior level security engineer/analyst teammates, address Prisma Cloud Enterprise product support and engineering Features/Stories, troubleshoot incidents, perform problem solving; and, the position will have the opportunity to participate in cloud security related solution design, integration/automation efforts, along with deployments of cloud security capabilities.

In this role, you will:

• Utilize industry leading security solutions and best practices to achieve cloud resource/platform/service/application related integrity, confidentiality, risk management, threat identification, security monitoring/remediation and incident response.
• Perform engineering work related to the technical enablement for Cloud Security Posture Management.
• Scripting/automation and other engineering tasks related to the posture management aspects of Prisma Cloud Enterprise.
• Work on integration of Prisma Cloud to other systems such as Splunk Cloud.
• Execute design/engineering/testing of Prisma Cloud RQL queries that implement detective policies for monitoring cloud resource misconfiguration/configuration drift and/or container security scanning for vulnerabilities and security compliance.
• Transform Information Security requirements into Prisma Cloud Enterprise policies both net new policy "creation"/development, as well as policy modifications/update.
• Perform engineering level positive and negative testing of Prisma Cloud RQL policy code, along with assisting with maintain our dedicated testing environment, leveraging Terraform automation for cloud service instantiation and configuration to support policy test execution.
• Track or remediate vulnerabilities and security issues.
• Review and correlate security logs.
• Be a motivated self-starter, quick to adapt while staying focused on delivering results in a fast-paced environment with aggressive deadlines.
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals.
• Deliver clear, concise, and actionable communication to various levels of organization on a timely basis to ensure effective understanding, decision-making, and execution.
• Working effectively with a virtual team consisting of members across various locations in the U.S. and India.

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• 1+ year of deep Prisms Cloud Enterprise experience, or experience with a similar Cloud Security Posture Management/Workload Protection tool such as Wiz or Aqua Security.
• 1+ year experience creating Prisma Cloud Enterprise custom policies via RQL, or experience with policy development for a similar Cloud Security Posture Management tool.
• 1+ year experience with scripting/automation languages such as Terraform, Python and/or PowerShell.
• 2+ years of experience with and strong understanding of Azure and Google public cloud PaaS platforms, services, configurations, workloads and hardening practices.
• 1+ year experience working with key industry frameworks/benchmarks/standards, such as: COBIT, Cloud Security Alliance (CSA), FedRAMP, FFIEC, NIST, CIS, etc.
• 1+ year experience with Atlassian suite of products (e.g., Confluence, Jira).
• 1+ year experience working on teams practicing Agile Scrum or Kanban methodologies.
• 2+ years experience with MS Word, Excel, Visio, PowerPoint, Outlook and Teams.

Desired Qualifications:

• Proven ability to work independently, as well as having strong interpersonal skills to work effectively within a team and with partners.
• Critical thinking skills, consistent attention to detail, and ability to meet deadlines amidst competing priorities.
• Strong verbal and written communication skills.
• 2+ years of Kubernetes experience.
• Knowledge and understanding of Splunk Cloud.
• Hands-on technical experience w/ the build-out of Landing Zones and setup/configuration of Azure and Google public cloud PaaS platforms and services.
• Experience with creation of Build policy subtype in Prisma Cloud Enterprise using YAML.
• Experience enabling auto-remediation via Prisma Cloud.
• Experience with API driven automation of policy creation.
• Experience with IAM & Data Protection expertise for monitoring and responding to related incidents.
• Experience with Infrastructure as Code (IaC) and/or Policy as Code (PaC) concepts/tools.
• Experience with change and incident management practices in medium to large enterprise environments.

Job Expectations:

• Travel up to 10% of the time.

Locations:

• 1525 WT Harris Blvd, Charlotte, North Carolina 28262
• 300 S Brevard St, Charlotte, NC 28202
• 2600 S Price Rd, Chandler, Arizona 85286
• 550 S 4th St, Minneapolis, Minnesota 55415
• 401 Las Colinas Blvd W Bldg A, Irving, Texas 75039

Pay Range:

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates. $100,000.00 - $179,000.00

Benefits:

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo (

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy ( to learn more.

Wells Fargo Recruitment and Hiring Requirements:

• Third-Party recordings are prohibited unless authorized by Wells Fargo.
• Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Req Number: R-458153

Job Tags

Similar Jobs