Senior Systems Operations Engineer

About this role:

Wells Fargo is seeking a Senior Systems Operations Engineer.

In this role, you will:

• Lead and coordinate enterprise vulnerability management activities across infrastructure, middleware, database, cloud, and application platforms.
• Analyze security vulnerabilities, assess risk exposure, and partner with technology teams to drive timely remediation.
• Monitor and manage vulnerability remediation performance against established service level objectives and enterprise risk standards.
• Collaborate with infrastructure, application, security, and architecture teams to prioritize and mitigate critical security risks.
• Identify opportunities for automation and process improvements to enhance vulnerability management effectiveness and reduce manual effort.
• Lead operational reviews and provide guidance on vulnerability remediation strategies, exception management, and risk treatment options.
• Develop and maintain vulnerability dashboards, scorecards, and executive reporting to support decision-making.
• Serve as a subject matter expert for vulnerability management processes, controls, and industry best practices.
• Support security audits, regulatory reviews, and risk assessments related to vulnerability management.
• Drive continuous improvement initiatives focused on reducing enterprise vulnerability exposure and improving compliance.

Required Qualifications:

• 4+ years of Systems Engineering, Technology Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Experience supporting enterprise vulnerability management, patch management, security operations, or infrastructure risk management programs.
• Strong understanding of operating systems, middleware, databases, cloud technologies, and enterprise infrastructure. Systems Engineering, Information Security, Infrastructure Engineering,
• Manage end-to-end vulnerability remediation activities across multiple Lines of Business (LOBs).
• Monitor vulnerability scanning results and ensure accurate identification, prioritization, tracking, and remediation of security vulnerabilities.
• Partner closely with infrastructure, middleware, database, and application teams to ensure vulnerabilities are remediated within policy-defined timelines.
• Conduct vulnerability triage and risk assessments, including validation of findings, severity review, and prioritization recommendations.
• Investigate and validate false positives through analysis of system configurations, operating systems, software versions, and compensating controls.
• Facilitate remediation planning sessions and coordinate emergency and critical vulnerability response activities.
• Drive vulnerability backlog reduction initiatives and identify long-term remediation strategies for recurring vulnerabilities.
• Support vulnerability exception reviews, risk acceptance processes, and compensating control assessments.
• Analyze emerging security threats, vendor advisories, and critical vulnerabilities to determine enterprise impact.
• Produce daily, weekly, monthly, and quarterly metrics and reporting related to vulnerability exposure, remediation effectiveness, compliance, and risk posture.
• Partner with Information Security, Risk Management, and Technology organizations to improve vulnerability management governance and operational effectiveness.
• Develop automation solutions and reporting capabilities to improve visibility into vulnerability remediation progress.
• Communicate risk exposure, remediation status, and escalation items to senior technology leaders, CIOs, CTOs, and security stakeholders.
• Lead root cause analysis efforts for recurring vulnerabilities and drive preventive solutions.

Job Expectations:

• 4+ years of experience in vulnerability management, cybersecurity operations, infrastructure security, risk management, or related disciplines.
• 3+ years of experience working with vulnerability scanning and management platforms such as Qualys, Tenable, Rapid7, or similar technologies.
• 2+ years of experience performing security data analysis, trend analysis, and executive-level reporting.
• 3+ years of experience using business intelligence and reporting tools such as Power BI, Tableau, ServiceNow, Jira, or equivalent platforms.
• Strong knowledge of vulnerability scoring methodologies including CVSS and risk-based prioritization frameworks.
• Experience analyzing operating system, middleware, database, and application vulnerabilities across enterprise environments.
• Experience developing and maintaining dashboards, KPIs, and metrics related to vulnerability remediation and security risk reduction.
• Knowledge of patch management processes and associated operational controls.
• Experience managing cross-functional remediation efforts involving technology, security, and business stakeholders.
• Ability to interpret security advisories, vendor bulletins, and emerging threat intelligence.
• Strong written and verbal communication skills with the ability to present complex technical risks to both technical and executive audiences.
• Demonstrated ability to manage escalations, coordinate remediation efforts, and influence stakeholders across multiple organizations.
• Experience identifying opportunities for process optimization and automation within vulnerability management programs.
• Strong analytical, problem-solving, and organizational skills with the ability to manage multiple priorities simultaneously.
• Experience with Qualys Vulnerability Management and Policy Compliance.
• Knowledge of enterprise patching and vulnerability governance frameworks.
• Experience with Python, SQL, and automation technologies for vulnerability analytics and reporting.
• Understanding of cloud security concepts across Azure, AWS, or Google Cloud environments.
• Security certifications such as Security+, GSEC, CISSP, CISM, or equivalent.

Posting End Date: 

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.