Senior Info Security Manager – Cyber Threat Fusion Center

Wells Fargo

. Lead the Cyber Threat Fusion Center organization responsible for monitoring, detecting, investigating, escalating, and responding to cybersecurity threats and incidents .

Posted 10/21/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading cybersecurity operations, incident response, and threat detection while fostering leadership development and operational excellence across teams. Proficient in translating complex cybersecurity issues into strategic business communications and aligning operations with security policies and risk objectives.

Highest-signal resume keywords

Cybersecurity Incident ResponseThreat Detection MethodologiesLeadership DevelopmentSecurity Operations ManagementOperational Performance Metrics

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security EngineeringThreat IntelligenceMalware AnalysisDigital ForensicsIncident ContainmentRoot Cause AnalysisService-Level ObjectivesRisk IndicatorsCyber Kill ChainMITRE ATT&CK

Soft Skills

LeadershipCollaborationCommunicationCoachingMentoring

Tools & Technologies

SIEMSOAREDRNDRThreat Intelligence PlatformsCase Management PlatformsCloud Security TechnologiesSecurity Analytics

Industry Keywords

CybersecurityOperational RisksIncident ManagementThreat HuntingAdversary Tactics

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead the Cyber Threat Fusion Center organization responsible for monitoring, detecting, investigating, escalating, and responding to cybersecurity threats and incidents
Lead, coach, and develop CTFC managers and technical leaders
Provide strategic and operational leadership for detection, containment, mitigation, escalation, and resolution of cybersecurity events
Establish consistent operating practices, priorities, performance expectations, and decision-making across teams, shifts, and technical functions
Maintain situational awareness of significant cyber threats, incidents, operational risks, and emerging issues
Provide senior leadership for high-severity, complex, or enterprise-impacting cybersecurity incidents
Coordinate cross-functional response activities and support executive engagement and escalation
Partner with cybersecurity, technology, risk, and business leaders to align CTFC operations with security policies, standards, priorities, and risk objectives
Provide subject matter expertise on security operations, threat detection, incident response, threat hunting, threat intelligence, and adversary tactics
Oversee analysis and correlation of security alerts, threat intelligence, and telemetry
Establish and monitor operational performance measures, service-level objectives, quality measures, and risk indicators
Drive continuous improvement across CTFC processes, structures, workflows, escalation paths, technologies, and operating practices
Govern and optimize security operations procedures, response playbooks, escalation criteria, and documentation
Collaborate with engineering, detection, intelligence, hunting, automation, and platform teams to improve technologies and response automation
Translate operational trends, incident activity, threat intelligence, and performance data into recommendations for cybersecurity leadership
Communicate operational risks, significant incidents, emerging threats, capability needs, and priorities to senior stakeholders
Manage workforce strategy, capacity, scheduling, and resource allocation for operational readiness and coverage
Lead recruiting, organizational planning, succession planning, and talent management
Mentor managers and senior technical professionals and strengthen leadership and technical capability
Promote accountability, disciplined execution, collaboration, continuous learning, and operational resilience
Identify systemic risks and capability gaps and drive cross-functional remediation
Represent CTFC priorities in cybersecurity strategy, investment, technology, and transformation initiatives
Leverage and validate AI-assisted outputs while accounting for model limitations, security, privacy, compliance, risk, and ethical requirements

Requirements

What you’ll need

7+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
3+ years of management or leadership experience
Experience leading managers, team leads, or multiple cybersecurity or technical teams
Experience leading security operations, cyber incident response, threat detection, or comparable cybersecurity operational functions
Experience providing leadership during significant or complex cybersecurity incidents
Experience leading multiple operational teams and people leaders within a 24x7 or mission-critical cybersecurity environment
Experience managing SOC managers, technical leads, senior incident responders, or comparable cybersecurity leadership roles
Experience leading geographically or organizationally distributed cybersecurity operations
Ability to establish operating models, governance, performance expectations, and consistent practices across multiple teams or shifts
Ability to coordinate complex response efforts across cyber defense, infrastructure, applications, cloud, risk, legal, communications, and business organizations
Experience briefing senior executives on significant cybersecurity incidents, operational risks, emerging threats, and security operations performance
Experience developing managers and senior technical professionals and building leadership succession and technical talent pipelines
Strong understanding of cybersecurity detection and response methodologies, threat intelligence, threat hunting, malware analysis, digital forensics, and adversary tactics, techniques, and procedures
Experience overseeing response to malware, phishing, insider threat, credential compromise, ransomware, data loss, cloud security events, and network intrusions
Experience leading root cause analysis, incident containment, eradication, recovery, post-incident review, and corrective-action activities
Experience developing and using SOC metrics, service-level objectives, quality measures, and risk indicators
Knowledge of MITRE ATT&CK, Cyber Kill Chain, NIST incident response practices, and security operations best practices
Experience with SIEM, SOAR, EDR, NDR, threat intelligence platforms, case management platforms, cloud security technologies, and security analytics capabilities
Experience driving automation, orchestration, and technology modernization initiatives within security operations
Ability to translate cybersecurity operational issues and technical risk into clear business and executive-level communications

Benefits

Comp & perks

Equal opportunity employer
Drug-free workplace
Medical accommodations available during recruitment or interview upon request
Risk and compliance support as part of the employment environment