{"id":3801406,"url":"https://alion.io/job/wells-fargo-principal-engineer-digital-forensics","title":"Principal Engineer - Digital Forensics","company":{"id":1977,"name":"Wells Fargo","domain":"wellsfargo.com","url":"https://alion.io/company/wells-fargo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":156,"ghost_share":0,"stale_share":0.045,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Smartsheet","optional":false},{"name":"Splunk","optional":false},{"name":"Waterfall","optional":false},{"name":"Autopsy","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"EnCase","optional":true},{"name":"FTK","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true},{"name":"Volatility","optional":true},{"name":"X-Ways Forensics","optional":true}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T14:26:55Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About this role:\nAt Wells Fargo, a Principal Engineer defines long-term engineering solutions for highly complex business and technical needs across multiple groups or the enterprise. You will translate strategic technology opportunities into technical direction, guide resolution of unique challenges, and provide leadership with insight on significant solutions and emerging technologies.\nIn this role, you will:\nAdvise leadership on applications, networks, information security, databases, operating systems, or web technologies for highly complex business and technical needs across multiple groups\nLead strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise\nTranslate advanced technology experience, business objectives, enterprise technology environments, organizational structures, and strategic opportunities into technical engineering solutions\nProvide vision, direction, and expertise to leadership on innovative and significant business solutions\nMaintain knowledge of industry practices and emerging technologies and recommend innovations that enhance operations or competitive position\nStrategically engage with professionals and managers across the enterprise and serve as a technical advisor to leadership\nRequired Qualifications:\n7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education\n Desired Qualifications:\n7+ years of focused professional experience in DFIR, threat hunting, and digital forensics within highly regulated industries (financial services preferred) or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.\nProven experience leading complex, multi-team, enterprise-wide programs in highly regulated organizations.\nStrong knowledge of digital forensics and incident response principles, tooling, and frameworks (e.g., case management systems, SOAR, log pipelines, forensics investigations, event triage).\nFamiliarity with SOC and IR functions, threat intelligence, detection engineering, and crisis management.\nExperience with SIEM tools like Splunk , Crowdstrike etc.\nProficiency with program and project management tools and frameworks (e.g., JIRA, Confluence, Smartsheet, MS Project, SAFe, Agile, Waterfall/Hybrid).\nDemonstrated proficiency in Python, PowerShell or equivalent scripting languages with practical experience automating forensic evidence collection, processing and investigative workflows.\nExceptional communication skills, including executive-level reporting, stakeholder engagement, and risk management.\nAbility to operate effectively across highly technical and non-technical domains, balancing operational needs with engineering constraints and business priorities.\nProven ability to analyze malware and malicious artifacts, including dynamic and static analysis, memory forensics, and identification of persistence mechanisms (formal reverse-engineering experience is a plus).\nDemonstrated expertise in cloud incident response (AWS, Azure, or GCP), including log analysis, IAM investigations, container workload forensics, and cloud-native security tooling.\n Job Expectations:\nPerform Tier 3 investigation on critical cyber cases in 24*7 environment.\nConduct forensic analysis of cyber incidents including hacking, malware attacks, data breaches and insider threats.\nIdentify, preserve, extract and analyze digital evidence from computers, mobile devices, servers, cloud systems, and other digital storage media.\nUse industry-standard forensic tools and techniques (e.g., FTK, EnCase, X-Ways, Autopsy, Volatility, Cellebrite) to uncover evidence and trace cyber attackers\nLead and execute advanced digital forensic investigations involving endpoint, cloud, network, mobile, email, and SaaS platforms to determine root cause, impact, data exposure, and attacker methodology.\nDesign, develop and maintain scalable forensic acquisition and analysis workflows, including custom scripts, artifact parsers, and automation to improve investigation efficiency and reduce manual effort.\nServe as Incident Commander during major security events, coordinating cross-functional technical teams, legal, compliance, risk, and executive leadership to drive timely containment and eradication actions.\nConduct threat hunting activities leveraging SIEM, EDR, network telemetry, and intelligence sources to proactively identify indicators of compromise (IOCs), anomalous behaviors, and emerging threats targeting the financial sector.\nDevelop and maintain incident response playbooks and standard operating procedures, ensuring alignment with regulatory requirements, industry frameworks, and evolving threat landscapes.\nBuild and maintain forensic readiness capabilities, including logging strategy, chain-of-custody processes, evidence retention standards, forensic imaging workflows, and tooling optimization.\nCollaborate with Fraud, Legal, Compliance, Privacy, and internal Audit teams to support investigations involving insider threats, data misuse, fraud activity, and regulatory reporting.\nPerform malware triage and reverse-engineering (as appropriate) to evaluate malicious payloads, persistence mechanisms, pivot paths, and risk to the institution, providing actionable intelligence to detection engineering teams.\nDrive continuous improvement of detection and response capabilities by identifying monitoring gaps, recommending new security technologies, tuning alerts, and contributing to security architecture reviews.\nPrepare high-quality written reports and executive-level briefs summarizing findings, incident timelines, business impact, and recommendations for remediation and long-term risk reduction.\nMentor and provide technical leadership to junior analysts, delivering training in forensic methodologies, investigative techniques, threat analysis, tool usage, and incident response best practices.\nPosting End Date:\n16 Nov 2026*Job posting may come down early due to volume of applicants.\nWe Value Equal Opportunity\nWells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.\nEmployees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.\nCandidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.\nApplicants with Disabilities\nTo request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.\nDrug and Alcohol Policy\nWells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.\nWells Fargo Recruitment and Hiring Requirements:\na. Third-Party recordings are prohibited unless authorized by Wells Fargo.\nb. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.\nc. Please be prepared to provide accurate information and supporting documentation in connection with any lawful employment and education verification conducted by Wells Fargo.","description_format":"text","description_chars":8327,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-11-05T11:37:25Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":17,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/wells-fargo-principal-engineer-digital-forensics","json_url":"https://alion.io/job/wells-fargo-principal-engineer-digital-forensics.json","meta":{"generated_at":"2026-11-06T15:42:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29312,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1977},"rest":"https://alion.io/mcp/rest/get_company?id=1977"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwells-fargo-principal-engineer-digital-forensics"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwells-fargo-principal-engineer-digital-forensics"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwells-fargo-principal-engineer-digital-forensics"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wells-fargo-principal-engineer-digital-forensics\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwells-fargo-principal-engineer-digital-forensics"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3801406}},{"tool":"search_jobs","arguments":{"company":"wellsfargo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3801406},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}