Information Security Engineer 5 - Cloud Security

Company: Wells Fargo Bank
Location: Avondale
Posted on: January 1, 2020

Job Description:

Job Description
Important Note: During the application process, ensure your contact information (email and phone number) is up to date and upload your current resume when submitting your application for consideration. To participate in some selection activities you will need to respond to an invitation. The invitation can be sent by both email and text message. - In order to receive text message invitations, your profile must include a mobile phone number designated as "Personal Cell" or "Cellular" in the contact information of your application.At Wells Fargo, we want to satisfy our customers' financial needs and help them succeed financially. We're looking for talented people who will put our customers at the center of everything we do. Join our diverse and inclusive team where you'll feel valued and inspired to contribute your unique skills and experience. -Help us build a better Wells Fargo. It all begins with outstanding talent. It all begins with you.Wells Fargo Technology sets IT strategy; enhances the design, development, and operations of our systems; optimizes the Wells Fargo infrastructure footprint; provides information security; and enables continuous banking access through in-store, online, ATM, and other channels to Wells Fargo's more than 70 million global customers. -Wells Fargo Technology offers technology and services that exceed Wells Fargo customers' expectations and directly enable them to succeed financially. We interact with customers more than 12 billion times a year through in-store, online, ATM, and telephone transactions. We impact customers directly, through systems availability and security, as well as indirectly, through our business partners who offer and deliver a myriad of products and services that meet customers' financial needs. We provide a competitive advantage for the company through excellence in fundamentals, integrated partnerships, and our talented and engaged team members. -The Cloud & Platform Security Solutions Engineering (CPSSE) team is part of the Information Security (IS) group under Wells Fargo Technology. - - -CPSSE provides security solutions engineering for all Cloud and Distributed Systems platforms through innovation, commitment and accountability, and delivery of quality products and services. Position is responsible for security solutions design, implementation, consulting, and security governance guidance around cloud platforms, virtualization technologies, containerization, security controls, and emerging technologies. - Position will be responsible to apply in-depth Information Security experience, knowledge, and breadth in order to provide solutions for emerging cloud platforms and technology security risks, and improve the enterprise's security posture. Position acts as a liaison to the owning technology LOB or area, cloud security program and supporting projects, Information Security (IS) focus areas, and peer teams across Information Security and Wells Fargo's Technology organization, to understand business processes and requirements and then provides security solutions design to enable risk mitigation across the enterprise.Multiple openings for lnformation Security Engineer (ISE5) positions.Roles & Responsibilities may include: -

• Cloud security engineers / DevSecOps engineer / SME's for high visibility cloud computing initiatives
• Evangelize opportunities, challenges, and security advantages of integrated cloud services
• Analyze and design cloud security capabilities encompassing: DevOps, automation, access, connectivity
• Analyze and design controls to secure different cloud deployment and service models
• Architect, design, and implement secure cloud frameworks
• Design, manage, and execute transformation required for Public Cloud
• Develop and implement secure CI/CD pipelines
• Proactively partner to update CI/CD pipelines based on trends identified in the environment
• Develop and implement cloud-based procedures, security baselines, continuous monitoring, and compliance checks -
• Develop and implement opportunities to virtualize, automate, and develop infrastructure as code
• Leverage agility and scalability of DevSecOps and automated governance utilizing secure infrastructure as code
• Harden infrastructure, platforms, workloads, and services
• Review/update security policies, standards, requirements, and solutions covering different cloud deployment and service models
• Proactively prioritize, analyze and address complex problems and incidents to ensure the highest level of environment stability and availability
• Develop, document and implement a greenfield framework for cloud optimization leveraging industry best practices (including but not limited to CSA, CIS, NIST, FedRAMP, OWASP, etc.) to ensure a secure, least privileged model
• Devise a strategy to develop and implement cloud infrastructure to enable public cloud environments and interconnect to on-prem legacy environments
• Devise a strategy to transition from traditional access management best practices to role based access management strategies aligned and scalable for the cloud
• Partner with stakeholders to assess public & on-prem cloud services implementation and automation opportunities
• Develop and maintain relationships with business and IT partners, engineering and implement automation solutions that balance business agility, operational maintainability, and risk reduction
• Work with leaders and team members at all levels and across functional lines
• Critical thinking skills to question status quo
• Utilize analytical skills and the ability to think outside the box
• Strong ability to learn and solution for new and emerging technologies, and adapting to change -**Open to all Wells Fargo Major Hub Locations including telecommute. **
  
  Required Qualifications
  
  • 4 + years of cloud computing experience
  • 2+ years of DevOps experience
  • 2+ years of cloud computing engineering experience in one or a combination of the following: Amazon Web Services (AWS), Google Cloud Compute (GCC) or Azure Cloud Security
  • 7+ years of information security applications and systems experience
    
    Desired Qualifications
    
    • IAM (Identity and Access Management) experience
    • Ability to influence management on technical or business solutions
    • Knowledge and understanding of application or software security such as: web application penetration testing, secure code review, secure static code analysis
    • Knowledge and understanding of Information Security Frameworks and standards (FFIEC, NIST, ISO)
    • Knowledge and understanding of monitoring the development of security vulnerabilities, threats, exposures, associated risk, and mitigating solutions
    • Knowledge and understanding of network automation development through scripting
    • Knowledge and understanding of SAML (Security Assertion Markup Language)
    • Knowledge and understanding of security technologies and concepts including identity management, single sign on, directory services, role based access control, cryptographic algorithms, mutual authentication and certificate management
    • Knowledge and understanding of security technologies and concepts including: defense in principles, antivirus, firewall data and Intrusion Detection Systems (Host, network, Wireless)
    • Knowledge and understanding of system monitoring and automation
    • Certified Information Systems Security Professional (CISSP)
    • Experience securing public SaaS cloud deployments
    • Experience securing IaaS/PaaS private cloud or DevOps environments
    • Experience working with cloud security management or governance tools
    • Cloud security certification such as Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Professional (CCP) or Cloud Computing Architect (CCA)
    • Cloud vendor certification such as VMware Certified Professional (VCP) or AWS Certified Solutions Architect
    • IDaas (IDentity as a Service) solutions experience
    • Experience with Agile Scrum (Daily Standup, Sprint Planning and Sprint Retrospective meetings) and Kanban
    • 4+ years of experience with scripting languages such as Bash, PowerShell, Python, Shell, VBScript, or JavaScript
    • 2+ years of experience with workload and service isolation in cloud and distributed platforms
    • Experience with RESTful API calls
    • Experience with Ansible automation tool
    • Ability to manage complex issues and develop solutions
    • Advanced Information Security technical skills and understanding of information security practices and policies
    • Excellent verbal and written communication skills
      
      Other Desired Qualifications
      
      • 3+ years of experience with secure DevOps and deployment automation to cloud environments
        
        Job Expectations
        
        • Ability to work on call as assigned
        • Flexibility to frequently be on call beyond normal working hours
        • Ability to travel up to 10% of the time
          
          Street Address
          NC-Charlotte: 1525 W Wt Harris Blvd - Charlotte, NC
          MN-Minneapolis: 255 2nd Ave S - Minneapolis, MN
          IA-West Des Moines: 800 S Jordan Creek Pkwy - West Des Moines, IA
          IA-West Des Moines: 7001 Westown Pkwy - West Des Moines, IA
          IL-Chicago: 10 S Wacker Drive - Chicago, IL
          MA-Boston: 125 High Street - Boston, MA
          NY-New York: 150 E 42nd St - New York, NY
          AZ-PHX-Northwest Phoenix: 2222 W Rose Garden Ln - Phoenix, AZ
          PA-Philadelphia: 101 N Independence Mall E - Philadelphia, PA
          NC-Raleigh: 1100 Corporate Center Dr - Raleigh, NC
          MO-Saint Louis: 1 N Jefferson Ave - Saint Louis, MO
          CA-SF-South Of Market Area: 45 Fremont Street - San Francisco, CA
          AZ-Chandler: 2700 S Price Rd - Chandler, AZ
          AZ-Chandler: 2600 S Price Rd - Chandler, AZ
          NC-Charlotte: 401 S Tryon St - Charlotte, NC
          CO-Denver: 1740 Broadway - Denver, CO
          GA-Atlanta: 3579 Atlanta Ave - Atlanta, GA
          TX-San Antonio: 4101 Wiseman Blvd - San Antonio, TX
          OR-Portland: 1300 Sw 5th Ave - Portland, OR
          
          
          Disclaimer
          
          All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.
          
          Relevant military experience is considered for veterans and transitioning service men and women.
          Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.
          

Keywords: Wells Fargo Bank, Avondale , Information Security Engineer 5 - Cloud Security, Other , Avondale, Arizona