Senior Information Security Engineer Cryptographic Protection

Senior Information Security Engineer Cryptographic Protection

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 2+ years of experience with Linux operating system engineering or automation
• 2+ years of experience with or strong conceptual understanding of encryption or related data protection technologies
• 2+ years of experience with security technology product evaluation, proof of concepts, & testing.

Responsibilities

• Evaluate the cryptographic capabilities of multiple data protection technologies deployed across Wells Fargo networks, applications, public key infrastructure and authentication services.
• Evaluate scripts written in various languages utilizing best practices / procedures for automation
• Perform deep-dive evaluations of encryption and other data protection technologies
• Need to be capable of creating technical/engineering documentation and have excellent written and oral communication.
• Participate in the research, analysis, design, testing and implementation of complex data protection technologies alongside other teams within our organization.
• Participates in interactions with encryption technology vendors – helps to ensure vendor product engineering is in line with the objectives and security requirements of Wells Fargo
• Work with partner Engineering Teams on identification and remediation of security vulnerabilities and may also conduct risk assessments of Infrastructure to ensure compliance with corporate security policies and adherence to best practices.
• May provide technical guidance to less experienced staff.

Preferred Qualifications

• Proven written and verbal communication skills with both Business/Management and Technical/Engineering resources
• Experience with security technology product evaluation, proof of concepts, testing, etc.
• Understanding of architectural, deployment, and integration concepts related to enterprise cryptographic products
• Knowledge and understanding of technology server: file encryption technology, encryption key management and information security policies
• Knowledge and understanding of cryptography and key management
• Demonstrated knowledge of encryption, hashing, data protection algorithms, and key management concepts
• Knowledge of programming or scripting languages.
• Demonstrated knowledge of Key Management lifecycle
• Experience with evaluating Symmetric/Asymmetric algorithms