This job has closed.

Wells Fargo · 2 weeks ago

Principal Engineer - Secure by Design; Product Security Solution Architect

Iselin, NJ

Full-time

Hybrid

Senior Level, Lead/Staff

$191K/yr - $305K/yr

7+ years exp

Wells Fargo is seeking a Principal Engineer within our Cybersecurity organization. This individual will serve as a Product Security Solution Architect for our Secure by Design team, responsible for ensuring security is fundamentally integrated into the design and architecture of technology products and platforms.

BankingFinancial ServicesFinTechInsurancePayments

No H1B

Responsibilities

Embed directly with product and platform teams to provide continuous security guidance from ideation and business case formation through to deployment and sunset

Design and champion secure-by-design integrations for a wide array of technologies, including Zero Trust Implementations, Cloud-Native, Ephemeral and Containerized Microservices, AI/ML, Edge Computing and IoT, Quantum, Trusted Compute, Distributed Ledger, and Unified Data Analytics

Serve as a subject matter expert in multiple security domains such as application security, cryptography, identity and access management, network security, and AI security

Translate complex business and technical requirements into actionable security controls and solutions

Proactively identify and mitigate security risks early in the development lifecycle to prevent costly rework and reduce the corporate attack surface

Contribute to the creation of reusable, secure-by-default frameworks and self-service tools to empower engineering teams

Qualification

Product Security ArchitectureApplication SecurityCloud SecuritySecure Development LifecycleDevSecOps PrinciplesThreat ModelingCryptographyAI/ML SecurityAgile Environment ExperienceIndustry CertificationsBachelor's DegreeCommunication

Required

7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Preferred

10+ years of experience in information security, with a focus on security architecture or product security

Demonstrated expertise in at least two of the following domains: application security, cloud security (AWS, Azure, GCP), data security, cryptography, network security, or AI/ML security

Proven ability to operate in agile, fast-paced environments and engage effectively across a wide variety of technology stacks and business domains

Strong understanding of secure development lifecycle (SDLC) processes, DevSecOps principles, and threat modeling

Excellent communication skills, with the ability to influence and articulate complex security concepts to both technical and non-technical stakeholders

Relevant industry certifications (e.g., CISSP, CISM, CSSLP, GCSA) are highly desirable

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience