Information Data Loss Prevention DLP Security Engineer

Wells Fargo is seeking an Information Security Engineer with expertise in Data Loss Prevention (DLP) policy authoring and content development . This role is responsible for business-as-usual activities and supporting designing, authoring, testing, and tuning DLP rules that protect sensitive data across email, endpoints, web, and SaaS/collaboration channels . This role sits at the intersection of engineering, risk, and operations, partnering closely with Information Protection, Incident Response, Legal, Risk, and platform teams to implement effective, scalable DLP controls.

In this role, you will:

• Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards.
• Support daily activities such as implementing operational allows, control operation, and activities supporting DLP development.
• Develop and maintain:
• Operational runbooks
• Exception and release-code workflows
• User-facing guidance and FAQs
• Release notes for policy updates and changes
• Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Author, maintain, and optimize DLP rules and policies.
• Continuously tune DLP policies to reduce false positives and negatives using telemetry, triage feedback, and controlled experimentation, measure and report precision, recall, and block efficacy.
• Provide technical support for security related issues
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
• Interface with more experienced technologists
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards, Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

• 2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• Experience with modern collaboration and productivity platforms, including:
• Microsoft 365 (Exchange, SharePoint, OneDrive, Teams)
• and/or Google Workspace, * Experience in financial services or other highly regulated industries, with familiarity with:
• NIST 800-53 / 800-171
• ISO/IEC 27001
• Data privacy and protection requirements
• Knowledge of endpoint DLP, CASB/SSE, secure web gateways, email security, OCR, and document fingerprinting technologies.
• Hands-on experience authoring and managing policies on one or more enterprise DLP platforms, such as:
• Microsoft Purview
• Broadcom (Symantec) DLP
• Forcepoint
• Proofpoint
• Zscaler
• or equivalent technologies
• Background in exception governance and release-code processes, balancing risk exposure, business needs, and user experience
• Excellent written communication and documentation skills, with the ability to communicate effectively to both technical and non-technical audiences
• Relevant certifications such as:
• SC-400 or SC-100
• CISSP, CCSP
• GIAC

Job Expectations:

• Ability to travel up to 10% of the time.
• Ability to work a hybrid work schedule - 3 days a week on-site/in office and 2 days a week remote.
• This position is not eligible for Visa sponsorship

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy (https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.