Senior Information Security Engineer

About this role:

Wells Fargo is seeking a Senior Information Security Engineer to join our Chief Technology Office (CTO). Learn more about the career areas and business divisions at wellsfargojobs.com. 

You will provide cyber risk and threat identification by proactively and continuously monitoring the internal and external landscape for events, risks, threats, malicious code, vulnerabilities, and attacks related to the Financial Services industry or Wells Fargo specifically. You will leverage your experience and applied knowledge to assist in the workflow, life cycle design and implementation of network security products.  You will bring your combination of technical expertise, proactive problem-solving, and the ability to align security measures with organizational goals to this role.

You will research and communicate information to the appropriate partners and provide actionable intelligence by enriching cyber threat intelligence from our partners, vendors, and open sources to protect external facing and internal based computing assets, data, customers, and brand reputation.

You will design, implement, and maintain robust network security infrastructures to protect critical assets and data. Leveraging your expertise in Palo Alto, Fortinet, and Check Point firewalls, you will ensure optimal performance, security, and compliance across the enterprise environment. You will be responsible for:

• Firewall Management: Configure, maintain, and troubleshoot Palo Alto, Fortinet, and Check Point firewalls to secure the organization’s network

• Policy Development: Design and implement firewall rules, access control policies, and NAT configurations to ensure compliance with security standards and business requirements

• Monitoring & Optimization: Conduct regular performance monitoring, rule base reviews, and policy cleanups to enhance efficiency and eliminate redundancies

• Threat Mitigation: Analyze and respond to security incidents, ensuring swift remediation of vulnerabilities and threats

• Network Architecture: Collaborate with network architects to design scalable, secure, and highly available network solutions

• Automation & Reporting: Develop scripts and tools to automate firewall policy updates and generate detailed security reports

• Compliance & Audits: Ensure firewall configurations align with organizational security frameworks and industry standards (e.g., PCI DSS, ISO 27001)

• Stakeholder Collaboration: Partner with IT, DevOps, and Security teams to support project requirements and address cross-functional security challenges

In this role, you will:

• Participate in computer security incident response activities for moderately complex events

• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies

• Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards

• Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security

• Review and correlate security logs

• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity

• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives

• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 4+ years of experience with network security products including installation, migration, upgrades, and de-commission

• 4+ years of experience with Palo Alto, Fortinet, and Check Point firewalls, including advanced features like Threat Prevention, SSL Inspection, and VPN configuration

• 4+ years of experience in creating, auditing, and refining firewall policies across complex network environments

Desired Qualifications:

• Exp