About this role:

Wells Fargo is seeking a cybersecurity technical information security officer with a proven track record of securing custody, tokenization, and blockchain-based infrastructure technology environments.  The ideal candidate will have extensive experience in distributed ledger technology, blockchain, and digital assets. This role serves as the Technical Information Security Officer on threats to crypto services. You will be responsible for threat modeling, prescribing, designing, and assuring preventative and detective cybersecurity controls, and directing adversarial testing. You will combine deep technical expertise with strategic thinking to design security solutions that protect mission-critical systems, ensure regulatory compliance, and support business growth.

In this role, you will:

• Act as the lead technical cybersecurity subject matter expert for the firm's blockchain infrastructure, tokenization platforms, and digital-asset services, with a focus on threat modeling and risk mitigation.
• Conduct in-depth threat modeling of crypto services to identify vulnerabilities and prescribe appropriate cybersecurity controls.
• Design, architect, and advise on the implementation of preventative and detective security controls for our digital asset platforms.
• Direct and manage adversarial testing activities, including penetration testing and red team exercises, to validate the security of our crypto services.
• Partner with governance, legal, and compliance teams to demonstrate control effectiveness and strengthen enterprise readiness for scaled digital-asset adoption.
• Develop and integrate smart contract security best practices into the Software Development Lifecycle (SDLC), including threat modeling and architectural security reviews.
• Collaborate with third-party oversight teams to evaluate the security posture of blockchain technology vendors and assess associated risks.
• Partner with product and engineering teams to embed security-by-design principles, accelerating secure development and reducing time-to-market.

Required Qualifications:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 2+ years of experience in architecting and securing digital asset ecosystems, including custody, tokenization platforms, and blockchain protocols.

Desired Qualifications:

• Demonstrated experience in threat modeling, security architecture, and prescribing security controls for complex systems.
• Strong experience in risk management, digital assets custody security, smart contract risk assessment, and third-party risk management.
• Proven success in influencing and providing technical guidance to engineering and product teams.
• Excellent executive communication, strategic thinking, and problem-solving skills.
• Bachelor's degree in Computer Science or a related technical field.
• Experience in offensive security (penetration testing, red team operations).
• Author of patents in digital asset custody or blockchain infrastructure security.

Job Expectations:

• Ability to work on-site in one of the listed locations. This is a hybrid work environment with no option for fully remote work.

• This position is not available for visa sponsorship.

• Ability to travel up to 15% of the time.

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Posting End Date:

*Job posting may come down early due to volume of applicants.