Info Security Engineer 5 - Security Content Development
Company: Wells Fargo
Location: Saint Louis
Posted on: March 18, 2019
Info Security Engineer 5 - Security Content Development Job DescriptionAt Wells Fargo, we want to satisfy our customers' financial needs and help them succeed financially. We're looking for talented people who will put our customers at the center of everything we do. Join our diverse and inclusive team where you'll feel valued and inspired to contribute your unique skills and experience.Help us build a better Wells Fargo. It all begins with outstanding talent. It all begins with you.Enterprise Finance & Information Technology offers technology and services that exceed Wells Fargo customers' expectations and directly enable them to succeed financially. We interact with customers more than 12 billion times a year through in-store, online, ATM, and telephone transactions. We impact customers directly, through systems availability and security, as well as indirectly, through our business partners who offer and deliver a myriad of products and services that meet customers' financial needs. We provide a competitive advantage for the company through excellence in fundamentals, integrated partnerships, and our talented and engaged team members.Enterprise Information Security:Since 1852, customers have trusted that Wells Fargo would keep their assets secure from theft and always available. Today, maintaining customer trust remains our underlying operating principle.Enterprise Information Security's (EIS) vision is to provide Wells Fargo world leading cyber security risk management. Through a framework that addresses policy, process, operations, people, and technology, EIS protects Wells Fargo's infrastructure, corporate data, and customer assets, and ensures alignment with applicable regulations and laws. EIS is part of Wells Fargo's Corporate Risk organization and is led by the Chief Information Security Officer.Job Description:Note: This position can sit in any core Wells Fargo location or telecommute. The role is an Info Sec Engineer 5 (ISE5) for the Security Content Development (SCD) Team operating within the Cyber Security Defense and Monitoring service. This is a broad technology group actively involved in the identification, monitoring and alerting of critical events discovered by various Enterprise Information Security teams during normal operations.An ISE5 in this role must understand a very broad range of technologies and be able to rapidly assess events for severity and impact in order to prioritize development of monitoring and alerting efforts. He or she must also be able to effectively convey observations and development deliverables to a wide audience.Within this position you will be responsible for creating/building content and assist in developing advanced security use cases.Required Qualifications 7+ years of information security applications and systems experience1 + years of experience with network security, endpoint security, or security threat vectors2 + years of Regular Expression (regex) experience Desired Qualifications Advanced Information Security technical skills and understanding of information security practices and policiesAbility to manage complex issues and develop solutionsExcellent verbal and written communication skills1+ year of Splunk experienceKnowledge and understanding of malware reverse engineering including: code or behavior analysis for endpoints and the networkAbility to execute in a fast paced, high demand, environment while balancing multiple prioritiesExperience working in a large enterprise environmentKnowledge and understanding of banking or financial services industryKnowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutionsExperience analyzing large data sets1+ year of DPI (Deep Packet Inspection) experienceHighly refined and professional verbal and written communications Other Desired Qualifications Experience with content development with any of the following: Splunk, Micro Focus ArcSight, IBM Qradar and LogRhythm) 5+ years of Security Information and Event Management (SIEM/SIM/SEM) experience Advanced Information Security technical skills and understanding of information security practices and policies Hands-on experience with information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devices Experience with host-based and/or network-based forensics tools and techniques Experience with host and/or network log analysis as applied to incident response / threat hunting Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents Strong ability to identify anomalous behavior on endpoint devices and/or network communications Strong experience in operating system and application security hardening and best practices Strong investigative mindset with an attention to detail Experience with multiple operating systems to include Windows, Mac OS, and Unix/Linux Demonstrate the ability to provide written and verbal communications to management to address real-time issues and incidents, including writing formal incident reports Advanced problem solving skills, ability to develop effective long-term solutions to complex problems Ability to manage complex issues and develop solutions Certifications in one or more of the following: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Reverse Engineering Malware (GREM), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensics Analyst (GNFA), Offensive Security (OSCP/OSCE/etc), or other relevant certifications. 3+ years of experience with full packet capture solutions. Job Expectations Ability to travel up to 10% of the time Disclaimer All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.Relevant military experience is considered for veterans and transitioning service men and women.Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.
Keywords: Wells Fargo, St. Louis , Info Security Engineer 5 - Security Content Development, Engineering , Saint Louis, Missouri
Didn't find what you're looking for? Search again!