Information Security Engineer

About this role Wells Fargo is seeking an Information Security Engineer to join the Cloud Workload Lifecycle Security (CWLS) team within the Cybersecurity Vulnerability & Patch Management organization. Join a dynamic team supporting Wells Fargo's hybrid cloud security transformation initiatives while helping reduce risk across public and private cloud environments.  The analyst will work closely with security engineers and analysts in the US and India to support Wiz Alerts/Findings Management, investigate and validate security findings, perform data analysis, assist with automation initiatives, and contribute to reporting and dashboard development. This role provides an opportunity to gain hands-on experience with cloud security technologies, cloud security posture management, container security, and cybersecurity operations.  In This Role, You Will  Support day-to-day operations of the Wiz platform and assist with findings management activities.  Review, validate, and analyze cloud security alerts, posture violations, and compliance findings.  Assist in troubleshooting security incidents and investigating alerting issues.  Collaborate with engineering teams and application partners to support remediation of identified findings.  Develop and maintain basic automation scripts and operational tools using Python, PowerShell, or similar technologies.  Perform data analysis and contribute to reporting, metrics, and dashboard development using tools such as Power BI or Tableau.  Support integration validation between Wiz and enterprise platforms such as Splunk, ServiceNow, and related tools.  Document processes, procedures, and operational runbooks.  Participate in Agile team ceremonies and contribute to continuous process improvements.  Stay current with cloud security trends, security best practices, and emerging technologies.

2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education 2+ years of experience in security findings, alerts, incidents, or vulnerabilities.  1+ years of experience with Azure, AWS, and Google Cloud platforms, services, workloads, and security fundamentals.  1+ years of experience with Wiz or similar Cloud Native Security Posture Management (CSPM/CNAPP) tools.  1+ years of experience of Identity and Access Management (IAM) concepts and cloud security principles.

Strong analytical, troubleshooting, and problem-solving skills.  Effective written and verbal communication skills.  Experience supporting cloud security operations, governance, or cloud migrations.  Knowledge of Kubernetes, containers, and container security concepts.  Familiarity with Azure Security Center, Microsoft Defender, Google Security Command Center, Wiz, Prisma Cloud, or similar platforms.  Basic understanding of security frameworks and standards such as CIS, NIST, CSA, FFIEC, or FedRAMP.  Experience with incident management, change management, or operational support processes.  Cloud or cybersecurity certifications such as Security+, AZ-900, SC-900, CCSK, CISA, or similar.  Experience working in financial services or other regulated industries.  Knowledge of data analysis, reporting automation, and dashboard development.  Ability to work collaboratively across teams and support security improvement initiatives.  Job Expectations: This role is not eligible for Visa Sponsorship Ability to travel up to 10% of the time Hybrid schedule (3 days in office, 2 days remote) Work Transparently: You always deal in an honest, direct, and transparent way Take Ownership: You embrace responsibility and find joy in having the answers Learn More: You regularly self-educate and improve your skill set Job Posting Locations: 300 S Brevard St., CHARLOTTE, North Carolina 28202 401 Las Colinas Blvd W Bldg A, Irving, Texas 75039