About this role:

Wells Fargo is seeking a Lead Vulnerability & Patch Management Information Security Engineer to help modernize and transform enterprise Vulnerability and Patch Management (VPM) capabilities through advanced automation, cloud security engineering, data analytics, and AI-driven solutions. This role will serve as a technical leader responsible for designing and implementing scalable security solutions that enhance vulnerability management, incident response, security monitoring, and risk reduction across a complex hybrid and multi-cloud environment.

The ideal candidate will bring a blend of information security engineering, automation, cloud security, data engineering, and vulnerability management expertise to support the evolution of VPM 2.0—an initiative focused on replacing manual processes with API-driven automation, intelligent data correlation, and AI-enabled decision support capabilities.

In this role, you will:

• Provide security consulting on large-scale technology initiatives to ensure alignment with Wells Fargo information security policies, standards, and regulatory requirements.
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to cloud security, application security, networking, authentication, cryptography, and enterprise security platforms.
• Lead efforts to modernize Vulnerability and Patch Management (VPM) processes through automation and engineering-driven solutions.
• Develop and support API-first integrations, automation frameworks, and scripting solutions that improve vulnerability discovery, analysis, reporting, and remediation workflows.
• Partner with engineering and DevOps teams to integrate vulnerability management capabilities into CI/CD pipelines and Infrastructure as Code (IaC) environments.
• Review, correlate, and analyze security logs and vulnerability data from multiple security tools and cloud platforms to identify risks and emerging threats.
• Design and optimize security data pipelines, aggregation processes, and normalization workflows that consolidate vulnerability intelligence across the enterprise.
• Utilize advanced SQL querying, data analytics, and data correlation techniques to improve vulnerability visibility, prioritization, and reporting.
• Support AI-driven initiatives focused on enhancing vulnerability management through intelligent recommendations, automated analysis, and risk-based decision support.
• Provide technical leadership in hybrid and multi-cloud environments, ensuring security controls and vulnerability management processes operate effectively across diverse cloud platforms.
• Identify security vulnerabilities and risks, perform security assessments, and evaluate remediation alternatives based on business and technical requirements.
• Utilize deep subject matter expertise in information security principles including threat identification, monitoring, vulnerability management, risk management, incident response, confidentiality, integrity, availability, and access management.
• Conduct research and evaluation of emerging technologies, security tools, and industry best practices to address evolving cyber threats and business needs.
• Collaborate and influence all levels of professionals, including engineers, architects, managers, and senior leaders.
• Lead cross-functional teams and initiatives to achieve strategic security objectives and improve enterprise security posture.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 3+ years of cybersecurity experience within a large financial institution or highly regulated environment.
• 3+ years of experience in vulnerability management and/or patch management tools and techniques.
• Experience developing automation solutions utilizing APIs, scripting, and programming languages such as Python, PowerShell, or similar technologies.
• Experience integrating security controls and scanning solutions into CI/CD pipelines and Infrastructure as Code (IaC) environments.
• Strong understanding of vulnerability management lifecycle processes, vulnerability scanners, and remediation workflows.
• Experience working across hybrid and multi-cloud environments, including AWS, Azure, and Google Cloud Platform.
• Experience with security data aggregation, data lakes, data normalization, and vulnerability intelligence platforms.
• Strong SQL and data analysis skills, including the ability to build and optimize complex queries supporting vulnerability management programs.
• Experience leveraging AI, machine learning, or advanced analytics to enhance security operations and risk management processes.
• Knowledge of security logging, monitoring, threat detection, and incident response best practices.
• Excellent verbal, written, and executive communication skills with the ability to translate complex technical concepts into actionable business outcomes.
• Strong leadership, strategic thinking, and problem-solving skills.

Job Expectations:

• Ability to travel up to 10% of the time.
• Ability to work a hybrid work schedule – 3 days a week on-site/in office and 2 days a week remote.
• This position is not eligible for Visa sponsorship.

Locations:

• Charlotte, NC
• Chandler, AZ
• Irving, TX

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Posting End Date:

*Job posting may come down early due to volume of applicants.