About this role:

Wells Fargo is seeking a Senior Systems Operations Engineer.

In this role, you will:

• Lead and coordinate enterprise vulnerability management activities across infrastructure, middleware, database, cloud, and application platforms.
• Analyze security vulnerabilities, assess risk exposure, and partner with technology teams to drive timely remediation.
• Monitor and manage vulnerability remediation performance against established service level objectives and enterprise risk standards.
• Collaborate with infrastructure, application, security, and architecture teams to prioritize and mitigate critical security risks.
• Identify opportunities for automation and process improvements to enhance vulnerability management effectiveness and reduce manual effort.
• Lead operational reviews and provide guidance on vulnerability remediation strategies, exception management, and risk treatment options.
• Develop and maintain vulnerability dashboards, scorecards, and executive reporting to support decision-making.
• Serve as a subject matter expert for vulnerability management processes, controls, and industry best practices.
• Support security audits, regulatory reviews, and risk assessments related to vulnerability management.
• Drive continuous improvement initiatives focused on reducing enterprise vulnerability exposure and improving compliance.

Required Qualifications:

• 4+ years of Systems Engineering, Technology Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Experience supporting enterprise vulnerability management, patch management, security operations, or infrastructure risk management programs.
• Strong understanding of operating systems, middleware, databases, cloud technologies, and enterprise infrastructure. Systems Engineering, Information Security, Infrastructure Engineering,
• Manage end-to-end vulnerability remediation activities across multiple Lines of Business (LOBs).
• Monitor vulnerability scanning results and ensure accurate identification, prioritization, tracking, and remediation of security vulnerabilities.
• Partner closely with infrastructure, middleware, database, and application teams to ensure vulnerabilities are remediated within policy-defined timelines.
• Conduct vulnerability triage and risk assessments, including validation of findings, severity review, and prioritization recommendations.
• Investigate and validate false positives through analysis of system configurations, operating systems, software versions, and compensating controls.
• Facilitate remediation planning sessions and coordinate emergency and critical vulnerability response activities.
• Drive vulnerability backlog reduction initiatives and identify long-term remediation strategies for recurring vulnerabilities.
• Support vulnerability exception reviews, risk acceptance processes, and compensating control assessments.
• Analyze emerging security threats, vendor advisories, and critical vulnerabilities to determine enterprise impact.
• Produce daily, weekly, monthly, and quarterly metrics and reporting related to vulnerability exposure, remediation effectiveness, compliance, and risk posture.
• Partner with Information Security, Risk Management, and Technology organizations to improve vulnerability management governance and operational effectiveness.
• Develop automation solutions and reporting capabilities to improve visibility into vulnerability remediation progress.
• Communicate risk exposure, remediation status, and escalation items to senior technology leaders, CIOs, CTOs, and security stakeholders.
• Lead root cause analysis efforts for recurring vulnerabilities and drive preventive solutions.

Job Expectations:

• 4+ years of experience in vulnerability management, cybersecurity operations, infrastructure security, risk management, or related disciplines.
• 3+ years of experience working with vulnerability scanning and management platforms such as Qualys, Tenable, Rapid7, or similar technologies.
• 2+ years of experience performing security data analysis, trend analysis, and executive-level reporting.
• 3+ years of experience using business intelligence and reporting tools such as Power BI, Tableau, ServiceNow, Jira, or equivalent platforms.
• Strong knowledge of vulnerability scoring methodologies including CVSS and risk-based prioritization frameworks.
• Experience analyzing operating system, middleware, database, and application vulnerabilities across enterprise environments.
• Experience developing and maintaining dashboards, KPIs, and metrics related to vulnerability remediation and security risk reduction.
• Knowledge of patch management processes and associated operational controls.
• Experience managing cross-functional remediation efforts involving technology, security, and business stakeholders.
• Ability to interpret security advisories, vendor bulletins, and emerging threat intelligence.
• Strong written and verbal communication skills with the ability to present complex technical risks to both technical and executive audiences.
• Demonstrated ability to manage escalations, coordinate remediation efforts, and influence stakeholders across multiple organizations.
• Experience identifying opportunities for process optimization and automation within vulnerability management programs.
• Strong analytical, problem-solving, and organizational skills with the ability to manage multiple priorities simultaneously.
• Experience with Qualys Vulnerability Management and Policy Compliance.
• Knowledge of enterprise patching and vulnerability governance frameworks.
• Experience with Python, SQL, and automation technologies for vulnerability analytics and reporting.
• Understanding of cloud security concepts across Azure, AWS, or Google Cloud environments.
• Security certifications such as Security+, GSEC, CISSP, CISM, or equivalent.