Job Summary

Wells Fargo is seeking an Information Security Engineering Manager. We believe in the power of working together because great ideas can come from anyone. Through collaboration, any employee can have an impact and make a difference for the entire company. Explore opportunities with us for a career in a supportive environment where you can learn and grow.

Responsibilities

- Manage a team of engineers that design, document, test, maintain and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication or directory services, email, internet, applications or endpoint security
- Manage security consulting on large projects for internal clients to ensure conformity with corporate information security policy, and standards
- Possess subject matter expertise at a mastery level in current and emerging security solutions and best practices
- Review and correlate security logs
- Manage computer security incident response activities for highly complex events
- Conduct technical investigation of security related incidents, and conduct post incident digital forensics to identify causes and recommend future mitigation strategies
- Manage implementation of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
- Work with more experienced technologists and team
- Interface with more experienced management
- Manage allocation of people and financial resources for Information Security Architecture
- Mentor and guide talent development of direct reports and assist in hiring talent

Required Qualifications
- 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following work experience training military experience education
- 2+ years of Leadership experience

Desired Qualifications
- 5+ years leading Information Security or Application Security product teams.
- Proven experience managing, hiring, mentoring, and developing Application Security engineering teams.
- Hands on expertise with enterprise Application Security tools such as Checkmarx, Checkmarx One, Fortify, Invicti, AppScan, WebInspect, Nexus, Black Duck,



or similar platforms.
- Strong experience in DevSecOps, security automation, secure coding practices, Secure SDLC, and Enterprise Pipeline EPL integration.
- Deep understanding of OWASP vulnerabilities, threat mitigation, and application security risk management.
- Strong knowledge of modern application development technologies, including APIs, containers, cloud platforms, and secure development methodologies.
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
- Industry recognized certifications such as CSSLP, CISSP, CISM, or equivalent.
- Excellent analytical, communication, presentation, and stakeholder management skills with strong attention to detail.
- Demonstrated ability to provide strategic security recommendations, influence stakeholders, and stay current with emerging security threats, attack techniques, and industry trends.
- Strong ability to communicate secure development concepts to both technical and non technical audiences, influencing outcomes through effective communication and stakeholder engagement.
- Demonstrated knowledge of application security requirements, secure development standards, secure coding practices, and industry best practices.
- Proven experience developing and publishing secure coding standards and guidance.
- Ability to collaborate effectively across cross functional teams to drive security initiatives and business outcomes.
- Solid stakeholder management, relationship building, and influencing skills.
- Experience in conflict resolution, negotiation, problem identification, and solution development.
- Advanced knowledge of Application Security products, tools, and security testing technologies.
- Experience with AI GenAI security concepts, including securing AI enabled applications, threat modeling AI systems, prompt injection risks, data leakage prevention, model governance,



and emerging AI security best practices.

Job Expectations
- Lead the strategy, development, enhancement, and operational management of Application Security platforms, including SAST, SCA, and related security tooling.
- Own the Application Security product portfolio, driving roadmap execution, platform modernization, and adoption of shift left security practices across the Secure Software Development Life Cycle SSDLC.
- Partner with Product Managers, Product Owners, engineering teams, and vendors to deliver high quality security capabilities aligned with business priorities and enterprise standards.
- Drive scalability of Application Security services through cloud first architecture, Enterprise Pipeline EPL integration, security APIs, automation, and DevSecOps practices.
- Continuously improve the accuracy and effectiveness of security testing by implementing product enhancements, tuning detection rules, reducing false positives, and prioritizing security risks.
- Support and enhance enterprise Application Security programs, including Application Security Champions ASC, Application Security Champions Community of Practice ASCCoP, and related security enablement initiatives.
- Manage vendor relationships, technology evaluations, platform upgrades, resiliency, business continuity, and compliance requirements.
- Collaborate with stakeholders across technology and business teams to influence security outcomes, drive innovation, and ensure alignment with BPPA architecture and Agile delivery practices.
- Lead, hire, mentor, and develop a team of Application Security engineers, ensuring effective workload management, resource allocation, training, and quality delivery.
- Provide risk based guidance and security expertise to development teams, helping strengthen secure coding practices and mitigate application security vulnerabilities.
- Experience managing security products and platforms using Agile methodologies, including backlog prioritization, roadmap planning, release management, and vendor engagement.
- Partner with enterprise AI, application development, and security teams to establish security guardrails, governance standards, and risk management practices for AI and Generative AI solutions.

📌 Information Security Engineering Manager - Application Security (Bengaluru)
🏢 Wells Fargo
📍 Bengaluru