Lead Full Stack Information Security Engineer - Counter Threat Operations

Wells Fargo is seeking a Lead Information Security Engineer on the Counter Threat Operations team within Cybersecurity to help build out the Counter Threat Operations Center (CTOC). The role operates at the intersection of cybersecurity, large-scale data engineering, cloud architecture, modern full-stack application development, and advanced analytics, supporting CTOC. This team is responsible for building multiple dashboards in CTOC to provide visibility across all the cybersecurity domains in the enterprise.

The engineer will lead architecture and engineering efforts for the CTOC build-out, while ensuring sound data modeling, governance, platform reliability, and secure handling of sensitive cyber telemetry. The role partners closely with cybersecurity architecture, platform engineering, and data science teams to translate security and business requirements into reliable, production-ready solutions.

In this role, you will:

• Serve as the technical owner for assigned applications, leading application onboarding, operational support, lifecycle management, and continuous improvement efforts.
• Design, build, and operate secure, scalable cloud-based data and software platforms that support Cyber Threat Operations analytics, dashboards, automation, and decision-making.
• Develop and maintain Python-based backend services, APIs, and data pipelines that enable security analytics, automation, AI/ML capabilities, and near real-time processing of large-scale security data.
• Architect and optimize enterprise data solutions, including data lakes, warehouses, and hybrid cloud environments, with a focus on data modeling, governance, performance, scalability, and secure data handling.
• Build and manage high-performance data products that ingest, transform, and analyze large volumes of data from diverse sources to support operational and strategic cybersecurity objectives.
• Deliver high-quality data assets, dashboards, reports, and visual analytics solutions by applying data visualization best practices to ensure insights are accessible, actionable, and aligned with stakeholder needs.
• Partner with cybersecurity, analytics, UX, engineering, and business teams to translate operational requirements into production-ready applications, analytics products, and dashboard solutions.
• Apply cloud-native architecture and engineering best practices across AWS, Azure, and GCP to improve reliability, scalability, resilience, security, and cost efficiency.
• Leverage approved AI-assisted development and analytical tools to accelerate system design, software development, testing, troubleshooting, and operational analysis while ensuring compliance with security, privacy, governance, and ethical standards.
• Analyze Cyber Threat Operations workflows and application footprints to identify opportunities for optimization, automation, enhanced analytics, and improved operational effectiveness.
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards, Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• 5+ years of Python experience.
• 5+ years of JavaScript or TypeScript experience, * Background in building or supporting security data platforms, analytics solutions, dashboards, or operational applications.
• 5+ years of data and software engineering with a strong focus on Information Security, Cyber Defense, or security analytics platforms.
• Experience building modern web applications using React, TypeScript/JavaScript, HTML/CSS, REST APIs, and modern frontend build tooling.
• Exposure to modern frontend libraries or patterns such as Next.js, Vite, TanStack Query, TanStack Table, React Hook Form, Zod, Zustand, Tailwind CSS, shadcn/ui, Radix UI, Vitest, Playwright, or similar technologies.
• Experience with Python backend, data, or analytics libraries and frameworks such as FastAPI, Flask, pandas, NumPy, PySpark, Polars, Airflow, Dagster, or similar technologies.
• Exposure to AI/ML or GenAI use cases, particularly in security or data environments.
• Familiarity with AI/ML or LLM-related libraries and platforms such as PyTorch, TensorFlow, JAX, Hugging Face, scikit-learn, LangGraph, LlamaIndex, Azure OpenAI, OpenAI APIs, or similar technologies.
• Experience aggregating and correlating data from multiple security tools, such as SIEM, endpoint, network, cloud, identity, vulnerability management, or threat intelligence platforms.
• Hands-on experience designing and managing data lakes, data warehouses, or hybrid data architectures with sound data modeling and governance practices.
• Experience with data visualization, dashboards, or UX/UI collaboration, translating complex data into actionable insights.
• Experience with enterprise authentication and authorization patterns, including SSO, SAML, OAuth 2.0, OIDC, JWT, RBAC/ABAC, secrets management, and audit logging.
• Proven ability to translate high-level requirements into technical tasks and execution plans.
• Experience working in cloud environments and supporting migration from on-prem to cloud.
• Proven expertise building secure, scalable cloud-native solutions across AWS, Azure, and/or Google Cloud.
• Bachelor's degree or higher in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy (https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more. Wells Fargo Recruitment and Hiring Requirements: a. Third-Party recordings are prohibited unless authorized by Wells Fargo. b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.