Lead Software Engineer – Information Security

Wells Fargo

. Provide deep technical guidance on secure coding, vulnerability remediation, threat modeling, and security tools .

Posted 10/13/2026full-timeUnited StatesSenior💰 $119,000 - $206,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Secure Software Development, Application Security, and DevSecOps, with a strong focus on integrating security practices throughout the software development lifecycle. Proven ability to lead security initiatives, mentor teams, and influence cross-functional partnerships to enhance security outcomes in complex environments.

Highest-signal resume keywords

Application SecuritySecure Software Development Lifecycle (SSDLC)Static Application Security Testing (SAST)Threat Modeling (STRIDE, PASTA)Agile and DevOps Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Coding PracticesVulnerability RemediationCode AnalysisSecurity Tool IntegrationSecurity KPIs and Metrics TrackingSecure Design ReviewsCloud-Native PlatformsMicroservicesAPIsSecurity Standards (OWASP)

Soft Skills

Effective CommunicationNegotiationInfluencing Technical TeamsMentorshipProblem Solving

Tools & Technologies

Fortify Code AnalyzerCheckmarxBlack Duck Software Composition AnalysisGitHub Advanced SecurityJiraAzure DevOps

Certifications & Qualifications

CSSLPGWAPTOSWESANS/GIAC Certifications

Industry Keywords

NISTISO 27001CRI ProfileDevSecOpsSecurity Assurance

Tech Stack

Tools & technologies

AzureCloudMicroservices

About the role

Key responsibilities & impact

Provide deep technical guidance on secure coding, vulnerability remediation, threat modeling, and security tools
Serve as the escalation point for Satellite ASCs and ensure QA/QC of findings, especially in high-risk and regulatory environments
Lead and enhance the Satellite ASC enablement journey, including onboarding, advanced training, and mentorship
Participate in and lead secure design reviews, code analysis, and architecture consultations across development teams
Drive and maintain automated security tooling integrations in CI/CD, including SAST, SCA, secrets scanning, and IaC reviews
Support creation and tracking of security KPIs and metrics dashboards
Help shape policy and control frameworks balancing developer velocity with security assurance
Contribute to governance and continuous improvement of the Satellite ASC Program
Act as a senior advisor and technical lead for the Satellite ASC Program
Partner with Product, Engineering, and Risk leaders to define secure design patterns and control objectives for cloud and enterprise systems
Lead review and escalation of critical findings in alignment with enterprise risk tolerance
Coach and guide Core ASCs to raise the capability and impact of the Core ASC Center of Excellence

Requirements

What you’ll need

5+ years of Software Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
5+ years of experience in Application Security, Secure Software Development, Product Security, or DevSecOps
Strong knowledge of secure software development practices and modern application architectures, including cloud-native platforms, microservices, and APIs
Experience performing secure code reviews and utilizing application security testing tools, including SAST, DAST, SCA, and GitHub Advanced Security (GHAS)
Experience implementing Secure Software Development Lifecycle (SSDLC) practices, threat modeling methodologies such as STRIDE and PASTA, and OWASP security standards
Experience partnering with development teams to integrate security controls throughout the software development lifecycle
Ability to work additional hours as needed
Meet in-office expectations, currently averaging 3 days in-office per week
This position is not eligible for Visa sponsorship
Ability to manage highly complex issues and negotiate solutions
Ability to interact and communicate effectively with all levels of an organization, including at the executive level
1+ year of experience with Fortify Code Analyzer and Checkmarx
1+ year of experience with Black Duck Software Composition Analysis (SCA)
1+ year of experience with Static Application Security Testing (SAST) tools
Experience working in Agile and DevOps environments utilizing GitHub, Jira, and Azure DevOps
Knowledge of NIST, ISO 27001, and CRI Profile frameworks
Experience scaling application security programs across large, federated, or decentralized organizations
Industry-recognized application security certifications such as CSSLP, GWAPT, OSWE, or SANS/GIAC certifications
Strong ability to influence technical teams, manage competing priorities, and drive security outcomes without direct authority
Experience developing and delivering secure coding training, developer enablement programs, or application security awareness initiatives
Experience leading security initiatives within cloud-native and DevSecOps environments
Demonstrated ability to build partnerships with engineering, architecture, risk, and technology teams

Benefits

Comp & perks

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement
Incentive opportunities may be available