Senior Information Security Engineer

About this role:

Wells Fargo is seeking a Senior Information Security Engineer for the Database Technology organization.

In this role, you will:

• Lead or participate in computer security incident response activities for moderately complex events
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 4+ years of hands-on experience in relational and non-relational DBMS
• 4+ years of experience in database security, database administration, or a combination of both
• 4+ years of scripting experience using Windows PowerShell, Unix Shell Scripting, Python
• 2+ years DBMS threat analysis and modeling

Desired Qualifications:

• 4+ years of hands-on experience in information security tools and technologies
• 4+ years of experience in combination of database masking, database monitoring or Database Vulnerabilities
• 4+ years of experience process definition, assessment and documentation
• 4+ years Ansible experience
• 4+ years of scripting experience using Java or PL-SQL
• IBM Security Guardium
• Splunk Architecture
• CISSP/CCSP
• Experience in Azure/AWS/GCP
• Knowledge and understanding of Big Data
• Knowledge and understanding of application security planning and security architecture
• Knowledge and understanding of information security risk assessment or audit
• Experience with Database authentication tools, database firewall and Encryption is preferred
• Experience with Azure services for database servers and instances
• Experience in Azure Arc hybrid and multi-cloud environment
• Understanding of cloud authentication (AWS and GCP) for managed database instances
• Good understanding of NIST and CIS Database Security standards
• Familiar with data security frameworks and standards such as PCI, ITIL, COBIT, ISO 27001
• Excellent verbal and written communication skills
• Advanced Information Security technical skills
• Ability to manage complex issues and develop solutions

Job Expectations:

• On-Call will be required for this position.
• This position requires working from one of the posted locations in a hybrid environment.
• There is no Visa sponsorship available for this position.

Pay Range
 

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

$100,000.00 - $196,000.00