Information Security Engineer Security Baseline Configuration

About this role:

Wells Fargo is seeking an Information Security Engineer to support the Security Baseline Configuration program within Cybersecurity. This role will help modernize and scale secure-by-default configuration standards across enterprise technologies by partnering with Product Owners, security teams, and infrastructure engineering organizations.

The engineer will contribute to the development, implementation, validation, and lifecycle management of security baselines that align with industry standards and enterprise security requirements. This position requires strong analytical skills, collaboration across multiple teams, and the ability to drive work through established governance and tracking processes while leveraging automation and AI-enabled tools to improve efficiency and consistency. Responsibilities include supporting baseline adoption for technologies such as Active Directory, operating systems, databases, firewalls, routers, switches, cloud platforms, and perimeter security solutions.

In this role, you will:

• Participate in security consulting engagements to ensure technology configurations align with corporate security policies, standards, and baseline requirements.
• Partner with Product Owners to evaluate proposed security baseline controls and support acceptance, rejection, or exception decisions.
• Assess downstream impacts of baseline changes across technology platforms and coordinate implementation activities with stakeholders.
• Support the development, documentation, maintenance, and validation of security baseline configurations across infrastructure, cloud, network, operating system, database, and directory service technologies.
• Track baseline requests, dependencies, approvals, and implementation activities through Jira workflows and associated governance processes.
• Assist with the migration and maintenance of baseline inventories and configuration standards within enterprise cloud security platforms.
• Review, document, and validate security configuration requirements aligned with enterprise policy, CIS Benchmarks, and other recognized industry frameworks.
• Utilize automation, scripting, and AI-enabled tools, including GitHub Copilot capabilities, to improve operational efficiency, documentation quality, and baseline management processes.
• Collaborate with engineering, operations, risk, and cybersecurity teams to resolve issues and achieve program objectives.
• Provide technical support and guidance for security-related configuration and hardening initiatives.
• Support vulnerability remediation efforts by ensuring baseline controls effectively address identified security risks.
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications

• 2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.

Desired Qualifications

• Experience supporting security baseline configuration, hardening, or infrastructure security initiatives.
• Knowledge of CIS Benchmarks and security configuration hardening principles.
• Familiarity with Security Technical Implementation Guides (STIGs) or other industry-recognized security standards.
• Experience working with Product Owners, engineering teams, and governance stakeholders to implement security requirements.
• Understanding of one or more technology domains, including:
  • Active Directory and directory services
  • Windows or Linux operating systems
  • Databases
  • Network infrastructure (switches, routers, firewalls)
  • Cloud platforms and cloud security controls
• Experience using Jira for workflow management, issue tracking, and operational governance.
• Ability to analyze technical requirements and identify downstream implementation impacts.
• Experience creating and maintaining technical documentation, procedures, and implementation guidance.
• Exposure to scripting or automation technologies such as PowerShell, Python, Bash, or similar tools.
• Familiarity with AI-assisted engineering tools, including GitHub Copilot, and an understanding of secure and responsible AI usage.
• Strong collaboration and communication skills with the ability to influence outcomes across multiple teams.
• Ability to manage multiple priorities and execute effectively in a fast-paced environment.

Location

• Charlotte, NC

Job Expectations

• Ability to work a hybrid schedule with at least 3 days per week in the office.
• This position is not eligible for Visa sponsorship.

Posting End Date:

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.