FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Information Security Engineer
Wells Fargo. Design and implement repeatable, scalable, and automated Application Security processes .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Application Security processes, including SAST, DAST, and SCA integration within SDLC workflows. Proficient in leveraging AI for development and security enhancements while ensuring compliance with industry standards.
Highest-signal resume keywords
Application Security EngineeringSAST, DAST, SCA IntegrationSecure Software Development Lifecycle (SSDLC)AI-Assisted Development ToolsDevSecOps Automation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security EngineeringInfrastructure as Code (IaC)API DevelopmentGitHub Advanced Security (GHAS)Secure Coding PracticesCheckmarxBlackduckPrismaJenkinsOWASP Standards
Soft Skills
Technical LeadershipCollaborationCommunication
Tools & Technologies
GitHubJiraServiceNowHarnessCI/CD EcosystemsAI/LLM-Enabled Development ToolingTrufflehogSynkSocketQualys
Industry Keywords
ComplianceCybersecurityGovernanceRegulatory ReviewsThird-Party Assessments
Tech Stack
Tools & technologiesCyber SecurityJenkinsSDLCServiceNow
About the role
Key responsibilities & impact- Design and implement repeatable, scalable, and automated Application Security processes
- Provide hands-on technical leadership in tooling integration, automation, and process execution
- Implement product and vendor enhancements and fine-tune rules to improve identification and prioritization of application security defects
- Manage upgrades, resiliency, continuity, and compliance with enterprise standards
- Recommend mitigation strategies for identified application security risks
- Represent Application Security in cross-functional governance and technical forums
- Support integration of Application Security controls across enterprise tools and CI/CD pipelines
- Support reporting of Application Security processes, execution status, and outcomes
- Collaborate with control management and cybersecurity leadership to design new security controls
- Support internal and external audits, regulatory reviews, and third-party assessments
- Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
- Apply technical judgment when validating and integrating AI-assisted outputs into solutions
Requirements
What you’ll need- 4+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
- Expertise across core Application Security domains: SAST, DAST, SCA, Secrets management and detection, and Infrastructure as Code (IaC)
- Strong experience integrating SAST, DAST, and SCA tools into SDLC workflows and source code repositories
- Advanced knowledge of GitHub, Jira, ServiceNow, Jenkins, Harness, and CI/CD ecosystems
- Strong understanding of OWASP standards and MITRE CVE/CWE frameworks
- Experience implementing and maturing Secure Software Development Lifecycle (SSDLC) practices across Agile and custom development frameworks
- Familiarity with AI/LLM-enabled development tooling, including auto-remediation capabilities using AI and governance considerations
- 4+ years of development experience in more than one language
- 3+ years using IaC to configure, build, and deploy
- 2+ years of DevSecOps / Automation experience
- Hands-on experience with Checkmarx, Blackduck, Prisma, Trufflehog, Synk, Socket, Invicti, and Qualys
- Proven experience with GitHub Advanced Security (GHAS), including secret scanning capabilities
- Experience in API development and custom services
- Not eligible for Visa sponsorship
- Demonstrate proficiency in AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agents
- Understand model limitations, security risks, and operational considerations
- Apply AI responsibly in development and production environments
- Ensure AI usage aligns with security, compliance, privacy, and ethical standards
Benefits
Comp & perks- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
- Incentive opportunities may be available