Cyber Sec Research Scientist 2 - Adversarial Operations - RWF

Important Note: During the application process, ensure your contact information (email and phone number) is up to date and upload your current resume when submitting your application for consideration. To participate in some selection activities you will need to respond to an invitation. The invitation can be sent by both email and text message.  In order to receive text message invitations, your profile must include a mobile phone number designated as “Personal Cell” or “Cellular” in the contact information of your application. 

At Wells Fargo, we are looking for talented people who will put our customers at the center of everything we do. We are seeking candidates who embrace diversity, equity and inclusion in a workplace where everyone feels valued and inspired.

Help us build a better Wells Fargo. It all begins with outstanding talent. It all begins with you.

Technology sets IT strategy; enhances the design, development, and operations of our systems; optimizes the Wells Fargo infrastructure; provides information security; and enables Wells Fargo global customers to have 24 hours a day, 7 days a week banking access through in-branch, online, ATMs, and other channels.

Our mission is to deliver stable, secure, scalable, and innovative services at speeds that delight and satisfy our customers and unleash the skills potential of our employees.

Enterprise Information SecuritySince 1852, customers have trusted that Wells Fargo would keep their assets secure from theft and always available. Today, maintaining customer trust remains our underlying operating principle. Enterprise Information Security’s (EIS) vision is  to provide  Wells  Fargo world leading  cyber  security  riskmanagement. Through a   framework that addresses policy, process, operations, people, and technology, EIS protects Wells Fargo’s infrastructure, corporate data, and  customer assets, and  ensures alignment with applicable regulations and laws.  EIS is part of Wells Fargo's Corporate Risk organization and is led by the Chief Information Security Officer. Job Description Our Enterprise Information Security team is looking for a strong cyber security professional to join our Cyber Security Defense and Monitoring Team.  This role will involve researching and weaponizing cutting-edge research on new attack vectors, techniques, and tactics. This role will emulate adversarial attacks in order to provide information to WellsFargo Lines of Business with the overall goal of providing knowledge of indicators or compromise and TTP (Tools, Tactics, and Procedures) to other teams. Team member will be responsible for operationalizing and executing attacks and will explain how combining different weaknesses can result in higher impact. This team member must be able to utilize or create complex hacking tools, create proof of concept exploits, and document attack chains so they can be re-created and defensive tactics developed for them. This role will research, analyze, design, test, and implement complex technologies, systems, and applications.  

This position reports to the Cyber Threat Management – Offensive Security Research Team and works closely with teams in a purple team capacity. Responsibilities include: 

• Develop custom red team tools
• Conduct Threat Emulation
• Conduct innovative research in cyber security
• Conduct active offensive security operations
• Develop in-depth findings report
• Communicate findings to lines of business based on inherit risks
• Participate in purple teaming
• Train/Mentor more junior members of team
• Work with the leadership team to identify opportunities and process improvements

RWF - Please note that "RWF" is an identifier for internal recruiting purposes only and has no connection to the nature or responsibilities of the job.

• 3+ years of information security experience in converged testing (red teaming) demonstrated through work or military experience
• 1+ year of experience in network, social, and physical domains demonstrated through work or military experience
• 3+ years of experience in one or a combination of the following: creating proof of concepts, creating exploits, or reverse engineering demonstrated through work or military experience

• Advanced Information Security technical skills
• Proficient in working with systems, networks, and application vulnerability testing
• Ability to manage complex security scenarios and develop innovative solutions to address the most recent cyber threats
• Knowledge and understanding of Python, Ruby, PowerShell, and Shell scripting
• Physical security assessments experience
• Ability to work effectively, as well as independently, in a team environment
• Ability to present complex material in a digestible, consumable manner to all levels of management
• Assessment experience in three or more of the following: mobile, web application, mainframe, wireless or network penetration testing

• 5+ years of performing white hat exploitation and post-exploitation experience 
• Experience with physical hardware hacking 
• Experience with physical security assessments 
• Exceptional report writing skills using a penetration tester framework/methodology.
• Highly experienced with operating system and application hardening best practices
• Strong ability to find and dissect vulnerabilities without using standard tools
• Demonstrates issue resolution and negotiation skills
• Comprehensive understanding of recent research and industry advances in  the following areas:  Computer and communication networks, Cyber security threat detection, Cyber security experimentation/testing, and Assembly.
• Perform debugging, performance evaluation, and paper/document writing.
• Lead red team activities and supports computer security incident response activities and the technical investigations of information security related incidents.
• Certifications in one or more of the following: Global Information Assurance Certification (GIAC), Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security WebExpert (OSWE)

• Ability to travel up to 5% of the time

NC-Raleigh: 1100 Corporate Center Dr - Raleigh, NC
NC-Charlotte: 401 S Tryon St - Charlotte, NC
NC-Charlotte: 1525 W Wt Harris Blvd - Charlotte, NC
NC-Winston Salem: 809 W 4 1/2 St - Winston Salem, NC
VA-Glen Allen: 4340 Innslake Dr - Glen Allen, VA
TX-San Antonio: 4101 Wiseman Blvd - San Antonio, TX
DC-Washington: 1700 K Street NorthWest - Washington, DC
AZ-Chandler: 2600 S Price Rd - Chandler, AZ
AZ-PHX-Central Phoenix: 100 W Washington St - Phoenix, AZ
AZ-PHX-Northwest Phoenix: 2222 W Rose Garden Ln - Phoenix, AZ
AZ-Tempe: 1305 W 23rd St - Tempe, AZ
TX-Plano: 4975 Preston Park Blvd - Plano, TX
TX-Irving: 2975 Regent Blvd - Irving, TX
MN-Minneapolis: 255 2nd Ave S - Minneapolis, MN
MN-Minneapolis: 600 S 4th St - Minneapolis, MN
MN-Minneapolis: 425 E Hennepin Ave - Minneapolis, MN
MN-Saint Louis Park: 600 Highway 169 S - Saint Louis Park, MN
IA-Des Moines: 800 Walnut St - Des Moines, IA
MO-Saint Louis: 1 N Jefferson Ave - Saint Louis, MO
PA-Philadelphia: 101 N Independence Mall E - Philadelphia, PA
IL-Chicago: 10 S Wacker Drive - Chicago, IL
CA-SF-Financial District: 333 Market St - San Francisco, CA
MA-Boston: 125 High Street - Boston, MA
NY-New York: 150 E 42nd St - New York, NY
GA-Atlanta: 3579 Atlanta Ave - Atlanta, GA
OR-Portland: 1300 Sw 5th Ave - Portland, OR
CA-El Monte: 3440 Flair Dr - El Monte, CA
UT-Salt Lake City: 260 Charles Lindbergh Dr - Salt Lake City, UT

• All offers for employment with Wells Fargo are contingent upon the candidate having successfully completed a criminal background check. Wells Fargo will consider qualified candidates with criminal histories in a manner consistent with the requirements of applicable local, state and Federal law, including Section 19 of the Federal Deposit Insurance Act.
  
  Relevant military experience is considered for veterans and transitioning service men and women.
  Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran/Gender Identity/Sexual Orientation.

Benefits
 

Visit https://www.wellsfargo.com/about/careers/benefits for benefits information.