Cyber Security Research Engineer- Validation Red Team

Position Overview

Wells Fargo is looking for a strong cyber security professional to perform validation work to ensure that findings identified by the Offensive Security Research Team have been remediated. This role involves the analysis and re-execution of previous red team findings to verify that these techniques and tactics either no longer work or have adequate detective controls to alert when detected. The team member will execute attack chains, write reports, and communicate results to business and system owners. They must consult with representatives from various parts of the bank, explain technical details, and may assist with developing defensive tactics to detect or prevent activity. They will utilize complex hacking tools and research offensive technologies in a production environment while supporting threat emulation activities.

Salary: $87,000.00 - $140,000.00

Schedule: Hybrid work schedule

Key Responsibilities:

• Conduct innovative research in cyber security
• Participate in active offensive security operations
• Perform vital work to validate that findings have been remediated
• Develop and present in-depth reports that provide a narrative of your activity
• Communicate results to lines of business based on inherent risks
• Work with the leadership team to identify opportunities and process improvements
• Participate in purple teaming

Required Qualifications:

• 2+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of work experience, training, military experience, or education
• 2+ years of information security experience in converged testing (red teaming)

Preferred Qualifications:

• 2+ years of experience with Linux OS environment
• 2+ years of experience with Burpsuite Pro
• 2+ years of experience working with VMWare Workstation
• 2+ years of cloud computing experience in one or a combination of: Amazon Web Services (AWS), Google Cloud Compute (GCC), or Azure Cloud Security
• Knowledge of Python, Ruby, PowerShell, and Shell Scripting
• Understanding of information security risk assessment procedures, risk mitigation, or remediation
• Ability to handle confidential material in a professional manner
• Knowledge of the banking or financial services industry
• Experience working in a large enterprise environment
• Understanding of system/application architecture and design concepts
• Ability to present complex material in a digestible manner to all levels of management
• Experience performing offensive security assessments against cloud environments
• Certifications in one or more of the following: GIAC, OSCP, OSWP, OSCE, OSEE, or OSWE

Benefits & Benefits:

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement