15 days old

Information Security Engineer 5: Cyber Threat Engineering

Minneapolis, MN
  • Job Code
Job Description

Since 1852, customers have trusted that Wells Fargo would keep their assets secure from theft and always available. Today, maintaining customer trust remains our underlying operating principle. Enterprise Information Securitys (EIS) vision is to provide Wells Fargo world leading cyber security risk management. Through a framework that addresses policy, process, operations, people, and technology, EIS protects Wells Fargos infrastructure, corporate data, and customer assets, and ensures alignment with applicable regulations and laws. EIS is part of Wells Fargo's Corporate Risk organization and is led by the Chief Information Security Officer.

Note: The preferred work location is Charlotte, NC and Winston-Salem, NC, but we will consider other core Wells Fargo locations.

Our Enterprise Information Security team is looking for a senior security engineer to join our Cyber Threat Engineering team. The position involves providing content development and support for Wells Fargos incident cyber security response and patch-reporting tool. Primary goals including proactively identify indicators of compromise (IOCs) and vulnerabilities that can help deter cyber-based attacks against Wells Fargo and its business operations and subsidiaries. The position will provide key functions that include:

  1. Write complex queries to retrieve the system information from all endpoints.
  2. Develop VBScripts, python and WMI application program interfaces (API) to interact with security tools.
  3. Develop scripts to retrieve the specific Windows components or integrate with other applications.
  4. Automate and customize he Tanium reports.
  5. Develop scripts to help advanced threat analysis.
  6. Develop Tanium sensors, benchmark, maintain and support the Tanium infrastructure and the team.
  7. Evaluate and test new functionalities of Cyber Security tools.

Required Qualifications

  • 7+ years of information security applications and systems experience
  • 4 + years of experience with network security, endpoint security, or security threat vectors
  • 3 + years of Windows or Linux scripting experience
  • 1 + year of Windows Management Instrument (WMI) scripting

Desired Qualifications

  • Advanced Information Security technical skills and understanding of information security practices and policies
  • Ability to manage complex issues and develop solutions
  • Excellent verbal and written communication skills
  • Experience with Security Information and Event Management (SIEM) products
  • Knowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutions
  • 3+ years of information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
  • Knowledge and understanding of Linux
  • Knowledge and understanding of UNIX
  • Experience in problem analysis, solution implementation, and change management
  • Knowledge and understanding of issues or change management processes
  • Web application security vulnerability detection and mitigation experience
  • Knowledge and understanding of application security planning and security architecture
  • Knowledge and understanding of establishing or managing cyber threat management capabilities and functions
  • Ability to prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
  • Experience analyzing large data sets
  • Knowledge and understanding of banking or financial services industry
  • Experience working in a large enterprise environment
  • Strong analytical skills with high attention to detail and accuracy
  • Ability to handle confidential material in a professional manner
  • Ability to identify key issues, involve affected parties, design solutions, obtain buy-in, and communicate effectively through resolution

Other Desired Qualifications
  • 3+ years of enterprise scripting experience (e.g. VBScript, Python, Powershell)

  • Experience with Tanium; automating, customizing, and developing sensors in support of the Tanium infrastructure.

  • Needs Expert Knowledge and experience with Window operating systems

  • Experience with Windows application troubleshooting

  • Experience connecting security log sources, authoring alerts, and creating reports and dashboards to monitor for notable security events technologies

  • Problem solving skills, ability to develop effective long-term solutions to complex problems

  • Knowledge and understanding of creation of installation packages with Wise Installation Studio or similar creation tools.

  • Information security based reporting, metrics, analysis, and data visualization experience.

  • CISSP or equivalent certification.

  • Familiarization with the following database platforms: MS SQL, Oracle, MySQL.

  • Big data service or tool experience

  • Programming, networking, and multiple-OS support experience.

  • Fluent in scripting or querying languages utilizing WMI, SQL, VBScript, or Python.

  • Regular Expression (regex) experience

  • Experience with IPv6 next generation Internet Protocol


All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.

Relevant military experience is considered for veterans and transitioning service men and women.

Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.



  • Engineering
  • Financial Services
  • Hospitality
  • Security / Protective Services
  • Legal

Featured Jobs

Career News

Share this job:

Information Security Engineer 5: Cyber Threat Engineering

Wells Fargo
Minneapolis, MN

Share this job

Information Security Engineer 5: Cyber Threat Engineering

Wells Fargo
Minneapolis, MN

Separate email addresses with commas

Enter valid email address for sender.

Join us to start saving your Favorite Jobs!

Sign In Create Account
Powered ByCareerCast