Lead Information Security Engineer

About this role:

We are seeking a Lead Information Security Engineer to provide technical leadership and strategic execution for our Security Baseline Configuration program. This role is responsible for driving complex security engineering initiatives, influencing outcomes across multiple organizations, and delivering scalable solutions that improve security posture through automation, standardization, and operational excellence.

In this role, you will:

Lead complex security engineering initiatives from intake through implementation, publication, and adoption

Establish prioritization frameworks and work management practices that ensure predictable delivery across a dynamic portfolio

Partner with engineering, infrastructure, architecture, and governance teams to drive secure-by-default solutions

Influence technical and business stakeholders without direct authority to achieve alignment on security requirements and risk mitigation strategies

Define and maintain security baseline standards, governance models, and lifecycle processes

Develop risk-based recommendations that balance security, operational requirements, and business objectives

Drive automation initiatives that improve consistency, reduce manual effort, and accelerate delivery

Create executive-ready communications, decision records, status reporting, and risk briefings

Mentor engineers and contribute to the professional development of team members through coaching and technical leadership

Serve as a trusted advisor and escalation point for complex security engineering decisions and implementation challenges.

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Experience implementing or governing security baselines aligned to CIS Benchmarks

Strong understanding of operating system security, network security, encryption, and secure configuration management

Strong stakeholder management skills with experience influencing senior leaders and technical teams without direct authority

Experience building organizational consensus around security controls, standards, and implementation approaches

Deep expertise in security engineering, security architecture, or security baseline configuration management

Demonstrated track record of driving measurable operational improvements through process optimization and automation.

Desired Qualifications:

Experience designing and implementing automation solutions using scripting or programming languages such as PowerShell, Python, Bash, Java, or C#

Experience integrating security controls into DevSecOps, CI/CD, infrastructure-as-code, or configuration management pipelines

Demonstrated experience leading large-scale, cross-functional security engineering initiatives

Proven ability to manage competing priorities, dependencies, and risk across a high-volume workload

Experience leveraging AI and automation responsibly to improve efficiency while maintaining appropriate security controls

Exceptional written and verbal communication skills with the ability to translate technical concepts into business-focused outcomes

Experience with vulnerability management, configuration compliance, security control validation, or security posture management

Experience with Jira, Agile delivery methodologies, workflow governance, and portfolio management practices

Experience in a regulated financial services or highly regulated industry environment

One or more of the following certifications is strongly preferred:

Relevant cloud security certifications (Azure, AWS, GCP)

CISSP (Certified Information Systems Security Professional)

GIAC Security Certifications (GSEC, GDSA, GCIA, GCSA, or equivalent)

CISM (Certified Information Security Manager)

CISA (Certified Information Systems Auditor)

Microsoft Security Certifications

Certified Cloud Security Professional (CCSP)

Job Expectations:

Demonstrate ownership and accountability for outcomes, delivery commitments, and risk management decisions

Operate effectively in a fast-paced environment with multiple concurrent priorities and changing business requirements

Build and maintain effective working relationships across technology, risk, compliance, and operational teams

Communicate risks, blockers, and decision points proactively, with recommended options for resolution

Maintain a strong focus on customer experience, operational sustainability, and long-term supportability

Apply risk-based decision making to achieve practical and effective security outcomes

Participate in mentoring, knowledge sharing, and leadership activities that strengthen organizational capability

Stay current on emerging technologies, security threats, industry frameworks, and engineering best practices

This position offers a hybrid work schedule

This position is not eligible for visa sponsorship.

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

$119,000.00 - $206,000.00

Benefits

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

Health benefits

401(k) Plan

Paid time off

Disability benefits

Life insurance, critical illness insurance, and accident insurance

Parental leave

Critical caregiving leave

Discounts and savings

Commuter benefits

Tuition reimbursement

Scholarships for dependent children

Adoption reimbursement

Posting End Date:

13 Aug 2026

Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.