Wells Fargo

Lead Software Engineer-Information Security

United States · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerWells Fargo
LocationUnited States
Work styleWork style not stated
Employment typeFull time
Employer posted13 Oct 2026

About this role:

Wells Fargo is seeking a Lead Software Engineer- Information Security. The Application Security Champion group is looking for a Lead Information Security professional with security knowledge to help with daily operations of the Application Security Champion (ASC) operating model. As a Core Application Security Champion (Core ASC), you’ll play a pivotal leadership role in scaling our modern security program across thousands of global applications. You will serve as a subject matter expert (SME), supporting engineering teams and mentoring a growing network of Satellite ASCs embedded within development squads. This role is ideal for a passionate security professional who thrives at the intersection of secure development, enablement, and innovation.

In this role, you will:

Provide deep technical guidance on secure coding, vulnerability remediation, threat modeling, and security tools
Serve as the escalation point for Satellite ASCs, ensuring QA/QC of findings, especially in high-risk and regulatory environments
Lead and continuously enhance the Satellite ASC enablement journey, including onboarding, advanced training, and mentorship
Participate in and lead secure design reviews, code analysis, and architecture consultations across multiple development teams
Drive and maintain automated security tooling integrations in CI/CD (e.g., SAST, SCA, secrets scanning, IaC reviews)
Support the creation and tracking of security KPIs and metrics dashboards, helping measure risk reduction and program impact
Help shape policy and control frameworks that balance developer velocity with security assurance
Contribute to the governance and continuous improvement of the Satellite ASC Program
Act as a senior advisor and technical lead for the Satellite ASC Program, helping define governance, oversight, and continuous improvement
Partner with Product, Engineering, and Risk leaders to define secure design patterns and control objectives for cloud and enterprise systems
Lead the review and escalation process for critical findings, ensuring alignment with enterprise risk tolerance
Coach and guide other Core ASCs to raise overall capability and impact of the Core ASC Center of Excellence.

Show full description

Required qualifications:

5+ years of Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, or education
5+years of experience in Application Security, Secure Software Development, Product Security, or DevSecOps
Strong knowledge of secure software development practices and modern application architectures, including cloud-native platforms, microservices, and APIs
Experience performing secure code reviews and utilizing application security testing tools, including SAST, DAST, SCA, and GitHub Advanced Security (GHAS)
Experience implementing Secure Software Development Lifecycle (SSDLC) practices, threat modeling methodologies (e.g., STRIDE, PASTA), and OWASP security standards
Experience partnering with development teams to integrate security controls throughout the software development lifecycle.

Desired Qualifications

1+ year of experience with Fortify Code Analyzer and Checkmarx
1+ year of experience with Black Duck Software Composition Analysis (SCA)
1+ year of experience with Static Application Security Testing (SAST) tools
Experience working in Agile and DevOps environments utilizing tools such as GitHub, Jira, and Azure DevOps
Knowledge of regulatory, risk, and compliance frameworks including NIST, ISO 27001, and CRI Profile
Experience scaling application security programs across large, federated, or decentralized organizations
Industry-recognized application security certifications such as CSSLP, GWAPT, OSWE, or SANS/GIAC certifications (GSSP, GWEB, or equivalent).Strong ability to influence technical teams, manage competing priorities, and drive security outcomes without direct authority
Experience developing and delivering secure coding training, developer enablement programs, or application security awareness initiatives
Experience leading security initiatives within cloud-native and DevSecOps environments.
Demonstrated ability to build strong partnerships with engineering, architecture, risk, and technology teams to improve application security posture.

Job Expectations:

Ability to work additional hours as needed
Meet in-office expectations (currently 3 days in-office per week average)
This position is not eligible for Visa sponsorship
Ability to manage highly complex issues and negotiate solutions
Ability to interact and communicate effectively with all levels of an organization; including at the executive level.

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$119,000.00 - $206,000.00

Benefits

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Posting End Date:

19 Oct 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.