This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Wells Fargo is seeking a Lead Information Security Engineer
Job Responsibility:
Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives
Own end-to-end production operations of the CyberArk Enterprise Password Vault environment
Ensure continuous availability, stability, and performance of all CyberArk components (Vault, PVWA, CPM, PSM, CP/CCP)
Maintain the EPV platform in a secure, compliant, and production-ready state at all times
Proactively monitor platform health, capacity, and performance to prevent service disruptions
Act as the primary L3/L4 escalation authority for EPV production incidents and outages
Lead major incident response, coordination, and recovery for PAM-related service impacts
Drive root cause analysis (RCA), problem management, and corrective actions
Ensure incidents are resolved within defined SLAs and service expectations
Own and execute production changes impacting the EPV platform
Ensure proper risk assessment, approvals, validation, and rollback readiness for all changes
Coordinate patching, upgrades, and maintenance activities with minimal business disruption
Own and maintain operational runbooks, SOPs, recovery procedures, and support documentation
Lead BCP/DR planning, execution, and testing for the CyberArk platform
Support internal and external audits by providing evidence, reports, and control validation
Ensure platform operations meet security, risk, and regulatory requirements
Oversee day-to-day PAM operations, including: Account onboarding and de-onboarding, Policy enforcement, Credential lifecycle management, Safe and platform administration
Govern and support break-glass access operations (good to have), ensuring controls, approvals, and auditability
Ensure consistent and error-free operational support for integrated applications
Monitor and analyze CyberArk logs, alerts, and metrics
Troubleshoot Vault, CPM, PSM, and PVWA issues across Windows, Linux, AD, database, and application layers
Coordinate with infrastructure, application, and network teams for dependency resolution
Act as the single operational point of contact for CyberArk platform issues
Engage CyberArk/vendor support for escalations, defect resolution, and fixes
Provide clear operational updates to stakeholders during incidents and outages
Lead and participate in 16x7 on-call rotation, providing decision-making during critical events
Provide guidance and oversight to engineers during production incidents
Drive operational discipline, consistency, and maturity across EPV support
Identify operational inefficiencies and reduce manual effort through automation and scripting
Leverage PowerShell, REST APIs, and platform tooling to improve reliability and response times
Requirements:
5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Deep production operations experience with CyberArk PAM in large enterprise environments