Leads application security engineering by designing scalable AppSec processes, integrating security tools into CI/CD and software development workflows, tuning vulnerability detection, and recommending risk mitigations. The role provides technical leadership, supports governance, audits, compliance, reporting, and enterprise security controls. It also requires responsible use of AI-assisted development tools, including validation of outputs and management of associated security, privacy, and operational risks.
About this role:
Wells Fargo is seeking a Senior Information Security Engineer to join our Application Security Team.
In this role, you will:
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$100,000.00 - $179,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
24 Sep 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
#BI-Hybrid
Wells Fargo is seeking a Senior Information Security Engineer to join our Application Security Team.
In this role, you will:
- Design and implement repeatable, scalable, and automated AppSec processes
- Provide hands-on technical leadership in tooling integration, automation, and process execution
- Implement ongoing product (internal and vendor) enhancements and fine-tuning of rules to increase the precision in identifying and prioritizing application security defects.
- Manage upgrades, resiliency, continuity, and compliance with enterprise standards.
- Recommend mitigation strategies for identified application security risks
- Serve as an AppSec representative in cross-functional governance and technical forums
- Support integration of AppSec controls across enterprise tools and CI/CD pipelines
- Support reporting of AppSec processes, execution status, and outcomes
- Collaborate with control management and cybersecurity leadership to design new security controls
- Support internal and external audits, regulatory reviews, and third-party assessments
- 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
- Expertise across core Application Security domains SAST, DAST, SCA, Secrets management and detection, Infrastructure as Code (IaC)
- Strong experience integrating SAST, DAST, and SCA tools into SDLC workflows and source code repositories
- Advanced knowledge of GitHub, Jira, ServiceNow, Jenkins, Harness, and CI/CD ecosystems
- Strong understanding of OWASP standards and MITRE CVE/CWE frameworks
- Experience implementing and maturing Secure Software Development Lifecycle (SSDLC) practices across Agile and custom development frameworks
- Familiarity with AI/LLM-enabled development tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations), including auto-remediation capabilities using AI, and governance considerations
- 4 + years - Development experience in more than one language
- 3 + years of using the IaC to configure, build, and deploy
- 2+ years of DevSecOps / Automation experience
- Hands-on experience with vendor tools Checkmarx, Blackduck, Prisma, Trufflehog, Synk, Socket, Invicti, Qualys
- Proven experience with GitHub Advanced Security (GHAS), including secret scanning capabilities
- Experience in API development and custom services
- This position offers a hybrid work schedule
- This position is not eligible for Visa sponsorship
- Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
- Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
- Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
- Understand and account for model limitations, security risks, and operational considerations
- Apply AI responsibly in development and production environments
- Ensure AI usage aligns with security, compliance, privacy, and ethical standards
- $100,000 - $163,000 - Charlotte, NC
- $100,000 - $163,000 - Chandler, AZ
- $100,000 - $163,000- Irving, TX
- $100,000 - $163,000 - West Des Moines, IA
- $100,000 - $163,000 - Columbus, OH
- $100,000 - $163,000- San Antonio, TX
- $110,000 - $179,000 - Minneapolis, MN
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$100,000.00 - $179,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
24 Sep 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
#BI-Hybrid
Wells Fargo San Francisco, California, USA Office
420 Montgomery St, San Francisco, CA, United States, 94103
Similar Jobs at Wells Fargo
Fintech • Financial Services
Leads enterprise application security architecture across applications, APIs, cloud-native platforms, DevSecOps, and AI-enabled solutions. Performs threat modeling, architecture reviews, security assessments, and risk analysis; develops security standards, reference architectures, design patterns, and requirements. Advises on secure development, software supply chain security, cloud security, and application testing while mentoring technical teams and influencing enterprise security strategy in a regulated environment.
Top Skills:
AIAPIsApplication SecurityAWSAzureCi/CdCloud-Native ArchitectureContainersDastDevsecopsGithub CopilotGCPInfrastructure As Code (Iac) ScanningKubernetesMicroservicesOwasp Top 10SastScaSoftware Supply Chain Security
Fintech • Financial Services
Lead technical design, deployment, automation, and operational maintenance of encryption, tokenization, and key management products (including HSMs). Provide technical leadership, run POCs, support audits and incident response, collaborate with vendors and internal teams, and oversee engineers to ensure secure, resilient cryptographic services and compliance with corporate policies.
Top Skills:
AnsibleBashChefCi/CdDevOpsEncryptionHardware Security Modules (Hsm)JavaScriptKey ManagementLinuxPowershellPuppetPythonTokenizationUipathVbscriptWindows Server
Fintech • Financial Services
Leads development of Python-based automation for load balancer infrastructure, including provisioning, configuration, lifecycle management, API integrations, and infrastructure workflows. Builds reusable automation frameworks, translates manual procedures into code, and supports scalable, secure, maintainable systems. Collaborates with network and platform engineering teams on deployments, customer journeys, and infrastructure service APIs across enterprise and cloud environments.
Top Skills:
AnsibleApigeeAvi/Nsx-AlbCitrix AdcCloud FoundryDjangoF5FastapiFlaskGitHaproxyKubernetesLinuxMicroservicesMongoDBOpenshiftPostmanPythonRest ApisUnix
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
