Be an Early Applicant
Wells Fargo: Tech-powered. Innovation-led. We're transforming financial services.
The Role
Lead incident response and digital forensics for complex security events; design, maintain, and troubleshoot cryptographic and security solutions (HSMs, CipherTrust, KMIP, TDE); consult on large projects, automate operations (Python, Ansible, REST APIs), perform risk assessments, manage key lifecycle and ceremonies, mentor team members, support audits/compliance (NIST, PCI-DSS), and provide technical leadership across a global environment.
Summary Generated by Built In
About this role:
Wells Fargo is seeking a Lead Information Security Engineer.
In this role, you will:
22 Jul 2026
*Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
Wells Fargo is seeking a Lead Information Security Engineer.
In this role, you will:
- Lead computer security incident response activities for highly complex events
- Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
- Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
- Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
- Review and correlate security logs
- Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
- Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
- Collaborate and influence all levels of professionals including managers
- Lead a team to achieve objectives
- 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
- 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
- Bachelor's and/or master's degree in engineering & technology
- 5+ years of Technology/Information security experience
- 5+ years of Information Security, Data protection, Cryptography technologies
- Experience with engineering and operations for Thales CipherTrust Manager, HSM's, IBM SGKLM/TKLM, Cloud key managers and/or any other cryptographic supporting products etc.
- Good understanding of Cryptographic protocols & algorithms
- Intermediate to advanced technical proficiency with Linux OS
- Good understanding of databases & storage systems with respect to encryption and data protection
- Intermediate to advanced expertise in scripting and automation, with hands-on experience in developing runbooks using Ansible, Python, PowerShell & Bash scripts, and YAML
- Good understanding and exposure to emerging technologies including Post Quantum Cryptography & Gen AI
- Ability to effectively drive results, provide feedback/direction, and manage and build relationships with leaders and team members in a geographically dispersed environment
- Consults with technical groups, users and/or vendors to identify and influence functional specifications and business/technical requirements
- Good knowledge of Agile methodologies, Kanban principles, working with JIRA boards.
- Very good understanding of Change management process including hands on with ServiceNow platform.
- Conduct technical investigation of security-related incidents, and conduct post-incident digital forensics to identify causes and recommend future mitigation strategies
- Effective verbal, presentation, written and interpersonal communication skills
- Good negotiation, conflict resolution and decision-making skills
- Good understanding of compliance and regulatory requirements for data protection
- Industry certification like CISSP, CCSP etc.
- A highly skilled Thales CipherTrust Engineer to design, deploy, and operate the bank's cryptographic ecosystem using Thales CipherTrust Manager.
- Ensures robust protection of keys, applications, and sensitive data across payments, digital channels, core banking, and cloud integrations.
- You will own the, Keys Life Cycle Management,, Transparent Encryption, KMIP clients, and security controls that align with NIST, PCI-DSS & Banks Security Policy
- Manage and operate Thales CipherTrust Platform - Deploy, configure, and maintain the following platforms:
- CipherTrust Manager (CM) clusters
- CipherTrust Transparent Encryption (CTE / CTE-U)
- CipherTrust Cloud Key Manager (CCKM)
- IBM SGKLM/TKLM
- Work with application/ business teams to integrate:
- PKCS#11 clients
- JCE providers for Java apps
- CipherTrust Agent for CTE
- Database encryption (TDE + HSM integration)
- Troubleshoot crypto issues: TLS handshake failures, PKCS#11 errors, CTE policy failures, KMIP failures.
- Automate operational tasks using:
- CipherTrust Manager REST APIs
- Python, Ansible, Bash, PowerShell
- Manage CipherTrust Manager high availability, upgrades, patching, and certificate management.
- Implement Transparent Encryption policies for Linux/Windows workloads including GuardPoints, access policies, and application-aware encryption
- Manage KMIP clients backed by CipherTrust Manager.
- Implement dual control and split knowledge for all sensitive operations.
- Conduct key ceremonies, tamper checks, when necessary.
- Work as a member of a geographically diverse team of encryption technology experts to administer and maintain large-scale technology solutions across a global enterprise environment.
- Providing technical update to the leadership for all engineering, automation development and provisioning activities
- Provide mentorship to Encryption Services team members and be a point of contact for technical escalation for team and customers.
- Partner with our Engineering peers to design and engineer robust connectivity and service solutions that emphasize security and encryption best practices.
- Provide solutions analysis and consulting services to several internal Lines of Business, including other technology teams as well as customer-facing business units.
- Maintain comprehensive technical documentation including functional requirements, technical designs, workflow diagrams, application communications diagrams, configuration documents, support documentation, procedural documentation, training materials, and some project documents.
- Participate in vendor support relationships and take an active role in facilitating the exchange of information between vendors and Wells Fargo in order to improve the technologies.
- Participate in audit and compliance activities, always seeking to ensure that our technology systems and human processes comply with regulatory requirements and standards.
22 Jul 2026
*Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
Skills Required
- 5+ years of Information Security Engineering experience
- Bachelor's and/or master's degree in engineering & technology
- 5+ years of Technology/Information security experience
- 5+ years of Information Security, Data protection, Cryptography technologies
- Experience with Thales CipherTrust Manager, HSMs, IBM SGKLM/TKLM, Cloud key managers
- Good understanding of cryptographic protocols and algorithms
- Intermediate to advanced technical proficiency with Linux OS
- Understanding of databases and storage systems with respect to encryption (including TDE) and HSM integration
- Intermediate to advanced scripting and automation experience (Ansible, Python, PowerShell, Bash, YAML)
- Exposure to Post Quantum Cryptography and Generative AI
- Experience with PKCS#11 clients, JCE providers, KMIP clients, and CipherTrust Agent/CTE integrations
- Knowledge of Agile methodologies, Kanban, working with JIRA boards
- Hands-on experience with Change management and ServiceNow
- Industry certification like CISSP or CCSP
- Experience designing, deploying, and operating Thales CipherTrust platform and key lifecycle management
- Familiarity with compliance and regulatory requirements for data protection (NIST, PCI-DSS, bank security policy)
Wells Fargo Compensation & Benefits Highlights
-
Healthcare Strength — Health coverage begins on day 1 with medical, dental, and vision, and includes mental health, prescription drugs, and preventive care often covered at 100% in-network. Well-being resources such as 24-hour clinical support and an Employee Assistance Program add to the breadth.
-
Parental & Family Support — Paid parental leave provides up to 16 weeks for a primary caregiver (4 weeks for non-primary) alongside fertility benefits and up to a $35,000 lifetime reimbursement for adoption, surrogacy, and donor expenses. Backup child and adult care further supports family needs.
-
Retirement Support — Retirement benefits feature a 401(k) with company matching contributions up to 6% of eligible pay. An employee stock purchase plan adds another avenue for long-term savings.
Wells Fargo Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Wells Fargo & Company (NYSE: WFC) is a leading financial services company that has approximately $2.2 trillion in assets. We provide a diversified set of banking, investment and mortgage products and services, as well as consumer and commercial finance, through our four reportable operating segments: Consumer Banking and Lending, Commercial Banking, Corporate and Investment Banking, and Wealth & Investment Management. Wells Fargo ranked No. 33 on Fortune’s 2025 rankings of America’s largest corporations. Our technology professionals drive innovation, information security, and big data analytics while maintaining a network that handles more than 12 billion customer interactions a year. Join us! Are you looking for more? Find it here. At Wells Fargo, we're more than a financial services leader – we’re a global trailblazer committed to driving innovation, empowering communities, and helping our customers succeed. We believe that a meaningful career is much more than just a job – it’s about finding all of the elements to help you thrive, in one place. Living the Well Life means you’re supported in life, not just work. It means having robust benefits, competitive compensation, and programs designed to help you find work-life balance and well-being. You’ll be rewarded for investing in your community, celebrated for being your authentic self, and empowered to grow. And we’re recognized for it — Wells Fargo continues to rank on the LinkedIn Top Companies lists of best workplaces “to grow your career.” All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. © 2026 Wells Fargo Bank, N.A. All rights reserved. Member FDIC.
Why Work With Us
We're known for our “Well Life” approach to supporting employees’ career aspirations, work-life balance, and mental and physical health. Wells Fargo continues to rank on the LinkedIn Top Companies lists of best workplaces “to grow your career.”
Gallery
Wells Fargo Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site:
3 days a week
