Lead Software Engineer - CICD - Security Scan Engineering

at  Wells Fargo

APPLICANTS WITH DISABILITIES

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

Required Qualifications:

• 5+ years of Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of development experience using Groovy, Java, C#, or Python (mix is preferred)
• 4+ years of experience automating secure development practices, including (static/dynamic/composition analysis, secrets detection, vulnerability management)
• Hands-on experience with two or more of the following tools: SonarQube, JFrog Xray, Fortify, Checkmarx, CAST Highlight, GitHub Advanced Security (Code QL/Dependabot/Secrets), TruffleHog, Prisma, OWASP Dependency Check, Sonartype OSS Index, WebInspect, AppScan
• Development experience with the Jenkins DSL dialect of Groovy
• Development experience with a focus on building CI/CD pipelines with workflow automation in vie

Desired Qualifications:

• 3+ years of experience with Agile software development methodologies (Scrum preferred)
• 5+ years of experience in software architectures including traditional three-tier and container-based microservices (Kubernetes preferred)
• 2+ years of experience designing applications hosted in the public cloud (Azure preferred)
• Familiarity with GitHub Actions & GitHub Advanced Security
• Knowledge of solution design leveraging IaaS, PaaS, and SaaS
• Fluency with modern monitoring and logging systems (Azure Monitor, Dynatrace, Splunk)
• Familiarity with Jira and expressing non-functional requirements as stories
• Excellent communication and presentation skills
• Familiarity with User Centered Design, Human Centered Design, and general UX principle

Wells Fargo is seeking a Lead Software Engineer to join our Technology organization and be part of our Chief Technology Office’s (CTO) Engineering Enablement team. Learn more about the career areas and lines of business at wellsfargojobs.com .
You will be an expert in the automation of secure software development practices, specifically, in integrating our security scan tool stack with our continuous integration/continuous deployment (CI/CD) tool stack, to build an industry-leading secure software development platform. You will set technical standards and direction for your area of expertise, mentor other software engineers on the team, and roll up your sleeves to tackle the most difficult challenges.

In this role, you will:

• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas of the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions, both strategic and tactical
• Provide vision, direction, and expertise to leadership on implementing innovative and significant business solutions
• Maintain knowledge of industry best practices and new technologies and recommend innovations that enhance operations or provide a competitive advantage to the organization
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership
• Take initiative, solve difficult problems, and eliminate manual processes

Required Qualifications:

• 5+ years of Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of development experience using Groovy, Java, C#, or Python (mix is preferred)
• 4+ years of experience automating secure development practices, including (static/dynamic/composition analysis, secrets detection, vulnerability management)
• Hands-on experience with two or more of the following tools: SonarQube, JFrog Xray, Fortify, Checkmarx, CAST Highlight, GitHub Advanced Security (Code QL/Dependabot/Secrets), TruffleHog, Prisma, OWASP Dependency Check, Sonartype OSS Index, WebInspect, AppScan
• Development experience with the Jenkins DSL dialect of Groovy
• Development experience with a focus on building CI/CD pipelines with workflow automation in view

Desired Qualifications:

• 3+ years of experience with Agile software development methodologies (Scrum preferred)
• 5+ years of experience in software architectures including traditional three-tier and container-based microservices (Kubernetes preferred)
• 2+ years of experience designing applications hosted in the public cloud (Azure preferred)
• Familiarity with GitHub Actions & GitHub Advanced Security
• Knowledge of solution design leveraging IaaS, PaaS, and SaaS
• Fluency with modern monitoring and logging systems (Azure Monitor, Dynatrace, Splunk)
• Familiarity with Jira and expressing non-functional requirements as stories
• Excellent communication and presentation skills
• Familiarity with User Centered Design, Human Centered Design, and general UX principles

Job Expectations:

• Willingness to work on-site at stated location on the job opening
• This position offers a hybrid work schedule

Relocation assistance is not available for this position.

Posting Locations:

• 1301 Solana Blvd - Westlake, Texas 76262
• 2600 South Price Rd - Chandler, Arizona 85286
• 300 South Brevard St - Charlotte, North Carolina 28202
• 800 South Jordan Creek Pkwy - West Des Moines, Iowa 50266
• 550 South 4th St - Minneapolis, Minnesota 55415