Lead Cyber Security Research Consultant

WELLS FARGO BANK; McLean (VA); Remote; USD 111,000 - 238,000; Full time

Job summary

A leading financial services company is seeking a Lead Cyber Security Research Consultant to emulate adversarial attacks and enhance security measures. The role involves conducting innovative research, developing tools, and mentoring team members. Candidates should have extensive experience in cyber security and offensive security operations, with proficiency in various programming languages. This position offers the opportunity to work remotely and be part of a dynamic team focused on improving security protocols.

Benefits

401(k) Plan

Paid time off

Disability benefits

Life insurance

Parental leave

Critical caregiving leave

Discounts and savings

Qualifications

• 5+ years of Cyber Security Research experience.
• 5+ years of information security experience in red teaming.
• Demonstrated lead experience.

Responsibilities

• Conduct Threat Emulation and offensive security operations.
• Develop custom penetration testing tools.
• Train and mentor junior team members.

Skills

Cyber Security Research

Offensive Security

Penetration Testing

Python

Ruby

PowerShell

Shell Scripting

Education

Bachelor's Degree

Tools

Cobalt Strike

Mythic

Job description

Wells Fargo is looking for a Lead Cyber Security Research Consultant that will emulate adversarial attacks in order to provide information to Wells Fargo Lines of Business with the overall goal of providing knowledge of indicators or compromise and TTP (Tools, Tactics, and Procedures) to other teams. The team member will be responsible for creating and executing attack chains with the Threat Simulation team members and will debrief leadership and business owners to explain how combining different weaknesses can result in higher impact. This team member must be able to utilize complex hacking tools, create proof of concept exploits, and document attack chains so they can be re-created and defensive tactics developed for them. This role will research, analyze, design, test, and implement complex technologies, systems, and applications. This position reports to the Cyber Threat Management - Offensive Security Research Team.

In this role, you will :

• Conduct Threat Emulation
• Conduct innovative research in cyber security and present to internal peers and partners
• Conduct active offensive security operations
• Conducts physical security assessments
• Develop custom penetration testing tools
• Develop in-depth findings report
• Communicate findings to lines of business based on inherit risks
• Participate in purple teaming
• Train / Mentor more junior members of team
• Work with the leadership team to identify opportunities and process improvements

Required Qualifications :

• 5+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of the following : work experience, training, military experience, education
• 5+ years of information security experience in converged testing (red teaming)
• 5+ years of performing white hat exploitation and post-exploitation experience
• 3+ year of experience in network, social, and physical domains
• Demonstrated lead experience

Desired Qualifications :

• Knowledge of Python, Ruby, PowerShell, and Shell Scripting
• Previous experience with common command-and-control (C2) frameworks such as Cobalt Strike and Mythic
• Knowledge and understanding of information security risk assessment procedures, risk mitigation or remediation
• Experience in one or a combination of the following : creating proof of concepts, creating exploits, or reverse engineering
• Experience performing security assessment against cloud service providers
• Ability to handle confidential material in a professional manner
• Knowledge and understanding of banking or financial services industry
• Experience working in a large enterprise environment
• Knowledge and understanding of system / application architecture and design concepts
• Ability to present complex material in a digestible, consumable manner to all levels of management
• Experience performing offensive security assessments against cloud environments
• Certifications in one or more of the following : Global Information Assurance Certification (GIAC), Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Web Expert (OSWE)

Job Expectations :

• Remote workers will be considered
• This position is not eligible for Visa sponsorship

Locations :

• 1525 WT Harris Blvd, Charlotte, North Carolina 28262
• 550 S 4th St, Minneapolis, Minnesota 55415
• 100 N 18th St, Philadelphia, PA 19103
• 333 Market Street, San Francisco, CA 94105
• 150 E 42nd Street, New York, NY 10017
• 10 S Wacker, Chicago, IL 60606
• 3075 Loyalty Circle, Columbus, OH 43219
• Remote will be considered

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

111,100.00 - $237,100.00

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings

Posting End Date : 15 May 2025

• Job posting may come down early due to volume of applicants.

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements :

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Create a job alert for this search

Cyber Security Lead • MCLEAN, Virginia, United States of America