Senior Information Security Engineer - Dev Enablement

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:

• Perform the role of an Application Security Champion who will be responsible for reviewing security requirements and security design submissions by application teams.
• Reviewing security requirements and security design submissions by application teams. Submissions will either be approved or rejected based on evaluation and comparison to systems of record.
• Provide information security consultation to improve awareness and compliance with Enterprise Application Security Program (EASP) policy, processes, and standards.
• Perform remediation of security assessment review issues and reporting to support EASP risk management.
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize application security.
• Validate SAST, DAST and SCA scans and recommend the fix for application teams.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Interact with teammates across all Lines of Business.

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 4+ years of experience as application security champion
• 2+ years of experience in at least one of the following practices like Security Requirements, Application Threat Modeling, Static Analysis, Application Security Risk Assessments, Security Design requirements.
• Knowledge and experience in identifying and suggesting mitigations to OWASP top 10, CWE/SANS top 25 to development teams.
• Ability to manage multiple priorities in a fast-paced dynamic environment.
• Advanced problem solving skills, ability to develop effective long-term solutions to problems.
• Excellent verbal and written communication skills
• Excellent inter-personal skills contributing to cordial team environment

• Knowledge and understanding of secure SDLC (System Development Life Cycle) methodologies.
• Experience in drafting application security coding standards.
• Ability to manage highly complex issues and negotiate solutions.
• Knowledge and understanding of Application security threat management and mitigation domain.
• Application security experience with banking/financial services applications.
• Certified in Industry renowned certifications like CISSP, CSSLP, CEH etc.