> Markdown version of [/jobs/ext/2637471-lead-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/2637471-lead-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Information Security Engineer - **Company:** Wells Fargo - **Location:** Chandler, AZ, United States - **Experience:** Expert - **Salary:** $119,000.0 - $206,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Agile Methodology, Artificial Intelligence, Amazon Web Services, JIRA, Microsoft Azure, Bash Shell, C Sharp (Programming Language), Cloud Computing Security, Configuration Management, Cyber Security, Information Systems, Continuous Integration, Information Systems Security Architecture Professional, Python (Programming Language), Network Security, Microsoft Security Essentials, Windows PowerShell, Systems Integration, Software Vulnerability Management, Scripting, Google Cloud, Performance Monitor, CIS Benchmarks, Operating System Security, Devsecops, Programming Languages - **Published:** August 7, 2026 - **Apply:** https://www.juju.com/job/00000000gm7x7z ## About the Role + 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education + Experience implementing or governing security baselines aligned to CIS Benchmarks + Strong understanding of operating system security, network security, encryption, and secure configuration management + Strong stakeholder management skills with experience influencing senior leaders and technical teams without direct authority + Experience building organizational consensus around security controls, standards, and implementation approaches + Deep expertise in security engineering, security architecture, or security baseline configuration management + Demonstrated track record of driving measurable operational improvements through process optimization and automation. Desired Qualifications: + Experience designing and implementing automation solutions using scripting or programming languages such as PowerShell, Python, Bash, Java, or C# + Experience integrating security controls into DevSecOps, CI/CD, infrastructure-as-code, or configuration management pipelines + Demonstrated experience leading large-scale, cross-functional security engineering initiatives + Proven ability to manage competing priorities, dependencies, and risk across a high-volume workload + Experience leveraging AI and automation responsibly to improve efficiency while maintaining appropriate security controls + Exceptional written and verbal communication skills with the ability to translate technical concepts into business-focused outcomes + Experience with vulnerability management, configuration compliance, security control validation, or security posture management + Experience with Jira, Agile delivery methodologies, workflow governance, and portfolio management practices + Experience in a regulated financial services or highly regulated industry environment + One or more of the following certifications is strongly preferred: + Relevant cloud security certifications (Azure, AWS, GCP) + CISSP (Certified Information Systems Security Professional) + GIAC Security Certifications (GSEC, GDSA, GCIA, GCSA, or equivalent) + CISM (Certified Information Security Manager) + CISA (Certified Information Systems Auditor) + Microsoft Security Certifications + Certified Cloud Security Professional (CCSP) Job Expectations: + Demonstrate ownership and accountability for outcomes, delivery commitments, and risk management decisions + Operate effectively in a fast-paced environment with multiple concurrent priorities and changing business requirements + Build and maintain effective working relationships across technology, risk, compliance, and operational teams + Communicate risks, blockers, and decision points proactively, with recommended options for resolution ## Description We are seeking a Lead Information Security Engineer to provide technical leadership and strategic execution for our Security Baseline Configuration program. This role is responsible for driving complex security engineering initiatives, influencing outcomes across multiple organizations, and delivering scalable solutions that improve security posture through automation, standardization, and operational excellence. In this role, you will: + Lead complex security engineering initiatives from intake through implementation, publication, and adoption + Establish prioritization frameworks and work management practices that ensure predictable delivery across a dynamic portfolio + Partner with engineering, infrastructure, architecture, and governance teams to drive secure-by-default solutions + Influence technical and business stakeholders without direct authority to achieve alignment on security requirements and risk mitigation strategies + Define and maintain security baseline standards, governance models, and lifecycle processes + Develop risk-based recommendations that balance security, operational requirements, and business objectives + Drive automation initiatives that improve consistency, reduce manual effort, and accelerate delivery + Create executive-ready communications, decision records, status reporting, and risk briefings + Mentor engineers and contribute to the professional development of team members through coaching and technical leadership + Serve as a trusted advisor and escalation point for complex security engineering decisions and implementation challenges., Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)