Information Security Engineering Senior Manager - Cyber Threat Fusion Center

About this role:

Wells Fargo is seeking a Information Security Engineering Senior Manager in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

Wells Fargo is seeking an experienced cybersecurity leader to serve as a Senior Manager within the Cyber Threat Fusion Center organization responsible for monitoring, detecting, investigating, escalating, and responding to cybersecurity threats impacting Wells Fargo.

The Senior CTFC Manager will lead an organization consisting of CTFC managers and cybersecurity technical resources, with accountability for the operational effectiveness, readiness, and continuous improvement of the organization. This leader will provide direction to CTFC management and technical teams, establish priorities, ensure consistency across teams and shifts, and maintain effective operational coverage during routine operations and periods of elevated cyber activity.

The Senior CTFC Manager will provide senior leadership during significant cybersecurity incidents, coordinate complex cross-functional response activities, and ensure appropriate escalation and communication to cybersecurity and technology leadership. The role will also be responsible for advancing CTFC capabilities, improving detection and response processes, strengthening operational governance, and ensuring that lessons from incidents, threat activity, and operational performance translate into measurable improvements.

This leader will develop CTFC leaders and technical talent, drive workforce and succession planning, establish performance expectations, and build a culture of accountability, technical excellence, collaboration, and continuous improvement.

The role requires strong cybersecurity and incident response expertise, demonstrated experience leading leaders and multidisciplinary technical teams, and the ability to influence senior stakeholders across cybersecurity, technology, risk, and business organizations.

In this role, you will:

• Lead CTFC organization consisting of CTFC managers and cybersecurity technical resources responsible for monitoring, detection, investigation, escalation, and response to cybersecurity threats and security incidents.
• Lead, coach, and develop CTFC managers and technical leaders, establishing clear accountability for operational execution, people leadership, technical excellence, and service delivery.
• Provide strategic and operational leadership for CTFC activities, ensuring effective detection, containment, mitigation, escalation, and resolution of cybersecurity events impacting the organization.
• Establish consistent operating practices, priorities, performance expectations, and decision-making across CTFC teams, shifts, and technical functions.
• Maintain situational awareness of significant cyber threats, incidents, operational risks, and emerging issues and ensure appropriate prioritization and escalation across CTFC.
• Provide senior leadership for high-severity, complex, or enterprise-impacting cybersecurity incidents, ensuring effective coordination, decision-making, escalation, communication, and resolution.
• Provide leadership oversight and escalation support to CTFC managers and incident leaders, particularly when events cross organizational boundaries, require executive engagement, or present significant operational or business risk.
• Partner with cybersecurity, technology, risk, and business leaders to ensure CTFC capabilities and operations align with information security policies, standards, organizational priorities, and risk management objectives.
• Provide subject matter expertise and leadership on security operations, cyber threat detection, incident response, threat hunting, threat intelligence, and emerging adversary tactics, techniques, and procedures.
• Oversee the effective analysis and correlation of security alerts, threat intelligence, and security telemetry to identify malicious activity, emerging threats, and opportunities to improve detection and response.
• Establish and monitor operational performance measures, service-level objectives, quality measures, and risk indicators to evaluate CTFC effectiveness, identify systemic issues, and drive improvement.
• Drive continuous improvement across CTFC processes, organizational structures, workflows, escalation paths, technologies, and operating practices.
• Ensure the development, maintenance, governance, and optimization of security operations procedures, response playbooks, escalation criteria, and operational documentation.
• Collaborate with cybersecurity engineering, detection engineering, threat intelligence, threat hunting, automation, and platform teams to improve CTFC technologies, detection capabilities, telemetry, and response automation.
• Translate operational trends, incident activity, threat intelligence, and performance data into actionable recommendations for cybersecurity leadership.
• Build strong partnerships with senior cybersecurity, technology, risk, and business leaders to communicate operational risks, significant incidents, emerging threats, capability needs, and organizational priorities.
• Manage workforce strategy, capacity, scheduling, and allocation of personnel and technical resources to maintain appropriate operational readiness and coverage.
• Lead recruiting, organizational planning, succession planning, and talent management for CTFC management and technical roles to build sustainable leadership and technical capability.
• Mentor and develop CTFC managers and senior technical professionals, creating clear development paths and strengthening the organization's leadership and technical bench.
• Establish an environment that promotes accountability, disciplined execution, constructive challenge, collaboration, continuous learning, and operational resilience.
• Identify systemic operational risks, capability gaps, and recurring failure patterns and drive cross-functional remediation to improve the effectiveness and resilience of security operations.
• Represent CTFC operational priorities and requirements in broader cybersecurity strategy, investment, technology, and transformation initiatives.
• Leverage AI to accelerate analysis, automation, troubleshooting, documentation, and security operations activities where appropriate.
• Apply strong technical judgment when validating and integrating AI-assisted outputs into operational processes and solutions.
• Understand and account for model limitations, security risks, data handling requirements, and operational considerations associated with AI-enabled capabilities.
• Ensure AI usage aligns with applicable security, compliance, privacy, risk, and ethical standards.

Required Qualifications:

• 7+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of management or leadership experience
• Experience leading managers, team leads, or multiple cybersecurity or technical teams.
• Demonstrated experience leading security operations, cyber incident response, threat detection, or comparable cybersecurity operational functions.
• Demonstrated experience providing leadership during significant or complex cybersecurity incidents.

Desired Qualifications:

• Experience leading multiple operational teams and people leaders within a 24x7 or mission-critical cybersecurity environment.
• Experience managing SOC managers, technical leads, senior incident responders, or comparable cybersecurity leadership roles.
• Experience leading geographically or organizationally distributed cybersecurity operations.
• Demonstrated ability to establish operating models, governance, performance expectations, and consistent practices across multiple teams or shifts.
• Proven ability to coordinate complex response efforts across cyber defense, infrastructure, applications, cloud, risk, legal, communications, and business organizations.
• Experience briefing senior executives on significant cybersecurity incidents, operational risks, emerging threats, and security operations performance.
• Experience developing managers and senior technical professionals and building leadership succession and technical talent pipelines.
• Strong understanding of cybersecurity detection and response methodologies, threat intelligence, threat hunting, malware analysis, digital forensics, and adversary tactics, techniques, and procedures.
• Experience overseeing response to threats including malware, phishing, insider threat, credential compromise, ransomware, data loss, cloud security events, and network intrusions.
• Experience leading root cause analysis, incident containment, eradication, recovery, post-incident review, and corrective-action activities.
• Experience developing and using SOC metrics, service-level objectives, quality measures, and risk indicators to evaluate operational effectiveness and drive continuous improvement.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, NIST incident response practices, and security operations best practices.
• Experience with technologies such as SIEM, SOAR, EDR, NDR, Threat Intelligence Platforms, case management platforms, cloud security technologies, and security analytics capabilities.
• Experience driving automation, orchestration, and technology modernization initiatives within security operations.
• Ability to translate cybersecurity operational issues and technical risk into clear business and executive-level communications.

Posting End Date:

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.