Sr Lead Vulnerability & Patch Management Cyber Security Research Engineer

About this role:

Wells Fargo is seeking a Senior Lead Vulnerability & Patch Management Cyber Security Research Engineer to help drive the evolution of our Vulnerability and Patch Management (VPM) capabilities through automation, AI-driven insights, and advanced security engineering. This role will lead research, design, and implementation of innovative cyber security solutions focused on vulnerability intelligence, cloud security, automation, and data-driven decision making. The successful candidate will combine expertise in cyber security research, software engineering, cloud technologies, and data analytics to modernize vulnerability management processes and create scalable, intelligent security capabilities that reduce risk across the enterprise.

This position is a key contributor to the next generation of Wells Fargo's Vulnerability and Patch Management strategy, focused on transforming manual processes into automated and AI-enabled solutions that support a complex hybrid and multi-cloud environment.

In this role, you will:

• Apply advanced data analysis techniques, including machine learning, statistics, and data mining to solve cyber security challenges and translate security requirements into scalable solutions.
• Lead the research, design, and implementation of automation capabilities supporting the Vulnerability and Patch Management (VPM) program.
• Develop API-driven integrations and automation frameworks that improve the collection, processing, correlation, and reporting of vulnerability data.
• Build prototypes, proofs of concept, and production-ready solutions that leverage AI and machine learning to generate actionable vulnerability intelligence and prioritization recommendations.
• Partner with engineering, cloud, infrastructure, and application teams to integrate vulnerability management capabilities into CI/CD pipelines and Infrastructure as Code (IaC) processes.
• Evaluate and implement security controls within software development and deployment workflows to improve vulnerability identification and remediation.
• Conduct research and identify emerging technologies, threats, attack methods, and security capabilities to address evolving cyber risks.
• Design and support solutions that aggregate and normalize security data from multiple vulnerability scanners, cloud platforms, and enterprise security tools.
• Develop and optimize data pipelines, data lake integrations, SQL queries, and correlation processes to improve vulnerability visibility and decision-making.
• Act as a subject matter expert for hybrid and multi-cloud security architectures, helping teams navigate security challenges across diverse cloud environments.
• Integrate new architectural analyses of cyber security features and align existing platforms with future security needs and strategic objectives.
• Provide engineering recommendations and technical leadership on advanced cyber security research initiatives and security automation strategies.
• Collaborate and influence all levels of professionals, including senior leaders, technology teams, and business stakeholders.
• Lead cross-functional initiatives and provide guidance to teams responsible for cyber security operations, threat detection, vulnerability management, and security engineering.
• Drive the strategic direction for advanced cyber security research, vulnerability intelligence, and security automation capabilities across the enterprise.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 7+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of Technology Engineering experience

Desired Qualifications:

• 4+ years of cybersecurity experience within a large financial institution or highly regulated environment.
• 4+ years of experience in vulnerability management and/or patch management tools and techniques.
• Experience developing API-first solutions, automation frameworks, and scripting using languages such as Python, PowerShell, or similar technologies.
• Experience integrating security tools and controls into CI/CD pipelines and Infrastructure as Code (IaC) environments.
• Strong understanding of vulnerability scanning technologies, security data aggregation platforms, and vulnerability management workflows.
• Experience working in hybrid and multi-cloud environments, including AWS, Azure, and Google Cloud Platform.
• Strong knowledge of cloud security architecture, cloud-native security controls, and cloud vulnerability management.
• Experience with SQL, data analytics, data correlation, normalization, and large-scale security data processing.
• Experience with data lakes, security data platforms, and enterprise-scale data pipelines.
• Exposure to AI, machine learning, or generative AI technologies applied to cyber security use cases.
• Ability to translate complex technical findings into actionable business and executive-level communications.
• Strong consulting, leadership, stakeholder management, and strategic planning skills.

Job Expectations:

• Ability to travel up to 10% of the time.
• Ability to work a hybrid work schedule – 3 days a week on-site/in office and 2 days a week remote.
• This position is not eligible for Visa sponsorship.

Locations:

• Charlotte, NC
• Chandler, AZ
• Irving, TX

Pay Range
 

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

$159,000.00 - $254,000.00

Posting End Date:

7 Aug 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.