Principal Engineer - Cyber Security Operations

About this role:

Wells Fargo is seeking a Principal Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

Wells Fargo is seeking a Principal Engineer for our Cyber Security Operations team to serve as the senior technical authority for security operations.  The position is responsible for leading and setting the strategy and direction for advanced cyber security incident response, threat detection, phishing and cybercrime response, and advanced adversarial response and mitigation for the company.  This position will interact directly with Threat Detection Services, Security Content Development, Cyber Threat Fusion Center, Cyber Threat Management, and Offensive Security Research Team.  

The ideal candidate will have experience in providing oversight to critical cyber security events and consulting executive leadership with the decisions related to business process, security controls, policies and standards, regulations and investment prioritization.  The ideal candidate will have extensive experience in conducting research and identifying technologies to address capability gaps for emerging cyber threats, attack methods, and evolving Tactics, Techniques, and Procedures (TTPs).  The ideal candidate should have extensive experience in providing oversight and guidance to a team in troubleshooting and resolving the most complex cyber security problems.  The candidate should have experience with data analytic techniques, including machine learning, statistics and data mining to solve core business challenges.  The position will require regular interface with external entities including law enforcement, intelligence, financial industry contacts and government organizations and agencies.  Interaction with internal partners including legal, fraud, financial crimes, technology and line of business leaders and executives will be required. 

Key Duties: 

• Principal Engineer (SME/technical authority) for incident response, cybercrime, phishing, evolving threats, automation development, and advanced adversarial response and mitigation  
• Implement machine learning and automation across the above areas
• Conduct strategy planning in the above areas for ICS
• Provide guidance and oversight to multiple teams within TDS, CTFC, and SCD (Security Operations)
• Engage with executive leadership across the lines of business to ensure technical solutions are in alignment with established priorities
• Create efficiency where it does not exist (via Machine Learning or Automation): Be three steps ahead of the company’s needs, providing solutions that improve efficiency/scalability for years to come
• Force multiplier: Enable team through collaboration and technical solutions

In this role, you will:

• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions
• Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership

Required Qualifications, US:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of technical engineering experience
• 7+ years of Incident Response Protocols and Tools experience 
• 7+ years of experience in information securi