Information Security Engineering Manager - Application Security

About this role:

Wells Fargo is seeking an Information Security Engineering Manager. We believe in the power of working together because great ideas can come from anyone. Through collaboration, any employee can have an impact and make a difference for the entire company. Explore opportunities with us for a career in a supportive environment where you can learn and grow.

In this role, you will:

• Manage a team of engineers that design, document, test, maintain and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication or directory services, email, internet, applications or endpoint security
• Manage security consulting on large projects for internal clients to ensure conformity with corporate information security policy, and standards
• Possess subject matter expertise at a mastery level in current and emerging security solutions and best practices
• Review and correlate security logs
• Manage computer security incident response activities for highly complex events
• Conduct technical investigation of security-related incidents, and conduct post-incident digital forensics to identify causes and recommend future mitigation strategies
• Manage implementation of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Work with more experienced technologists and team
• Interface with more experienced management
• Manage allocation of people and financial resources for Information Security Architecture
• Mentor and guide talent development of direct reports and assist in hiring talent

Required Qualifications:

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 2+ years of Leadership experience

Desired Qualifications:

• 5+ years leading Information Security or Application Security product teams.
• Proven experience managing, hiring, mentoring, and developing Application Security engineering teams.
• Hands-on expertise with enterprise Application Security tools such as Checkmarx, Checkmarx One, Fortify, Invicti, AppScan, WebInspect, Nexus, Black Duck, or similar platforms.
• Strong experience in DevSecOps, security automation, secure coding practices, Secure SDLC, and Enterprise Pipeline (EPL) integration.
• Deep understanding of OWASP vulnerabilities, threat mitigation, and application security risk management.
• Strong knowledge of modern application development technologies, including APIs, containers, cloud platforms, and secure development methodologies.
• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Industry-recognized certifications such as CSSLP, CISSP, CISM, or equivalent.
• Excellent analytical, communication, presentation, and stakeholder management skills with strong attention to detail.
• Demonstrated ability to provide strategic security recommendations, influence stakeholders, and stay current with emerging security threats, attack techniques, and industry trends.
• Strong ability to communicate secure development concepts to both technical and non-technical audiences, influencing outcomes through effective communication and stakeholder engagement.
• Demonstrated knowledge of application security requirements, secure development standards, secure coding practices, and industry best practices.
• Proven experience developing and publishing secure coding standards and guidance.
• Ability to collaborate effectively across cross-functional teams to drive security initiatives and business outcomes.
• Strong stakeholder management, relationship-building, and influencing skills.
• Experience in conflict resolution, negotiation, problem identification, and solution development.
• Advanced knowledge of Application Security products, tools, and security testing technologies.
• Experience with AI/GenAI security concepts, including securing AI-enabled applications, threat modeling AI systems, prompt injection risks, data leakage prevention, model governance, and emerging AI security best practices.

Job Expectations:

• Lead the strategy, development, enhancement, and operational management of Application Security platforms, including SAST, SCA, and related security tooling.
• Own the Application Security product portfolio, driving roadmap execution, platform modernization, and adoption of shift-left security practices across the Secure Software Development Life Cycle (SSDLC).
• Partner with Product Managers, Product Owners, engineering teams, and vendors to deliver high-quality security capabilities aligned with business priorities and enterprise standards.
• Drive scalability of Application Security services through cloud-first architecture, Enterprise Pipeline (EPL) integration, security APIs, automation, and DevSecOps practices.
• Continuously improve the accuracy and effectiveness of security testing by implementing product enhancements, tuning detection rules, reducing false positives, and prioritizing security risks.
• Support and enhance enterprise Application Security programs, including Application Security Champions (ASC), Application Security Champions Community of Practice (ASCCoP), and related security enablement initiatives.
• Manage vendor relationships, technology evaluations, platform upgrades, resiliency, business continuity, and compliance requirements.
• Collaborate with stakeholders across technology and business teams to influence security outcomes, drive innovation, and ensure alignment with BPPA architecture and Agile delivery practices.
• Lead, hire, mentor, and develop a team of Application Security engineers, ensuring effective workload management, resource allocation, training, and quality delivery.
• Provide risk-based guidance and security expertise to development teams, helping strengthen secure coding practices and mitigate application security vulnerabilities.
• Experience managing security products and platforms using Agile methodologies, including backlog prioritization, roadmap planning, release management, and vendor engagement.
• Partner with enterprise AI, application development, and security teams to establish security guardrails, governance standards, and risk management practices for AI and Generative AI solutions.

Posting End Date: 

8 Aug 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.