Sr. Information Security Engineer Web and Email Security

Wells Fargo Bank•Minneapolis, MN

9h•$100,000 - $196,000•Hybrid

About The Position

About this role: Wells Fargo is seeking a Senior Web and Email Security Engineer to join the Enterprise Data Loss Prevention (EDLP) Web and Email Security (WES) team , which governs, monitors, and enforces Wells Fargo’s Appropriate Use Policy through enterprise web filtering and email security controls. This role plays a critical part in safeguarding the organization by assessing, permitting, or restricting Internet and email access based on risk, compliance standards, and business needs. The ideal candidate brings strong analytical skills, sound judgment, and experience operating within complex, highly regulated environments. Key Responsibilities Web Security Operations Monitor external connectivity to identify access attempts to unsanctioned or inappropriate websites. Conduct detailed research on requested or newly discovered sites to determine their risk profile, category, and compliance impact. Block Internet resources determined to be invalid, unsafe, malicious, or out of policy for Wells Fargo connectivity. Review and process unblock requests based on documented business justification, risk assessment, and organizational standards. Email Security & Support Serve as an intake point for inquiries related to restricted emails, blocked content, and delivery issues. Analyze and resolve email‑related exceptions while ensuring alignment with enterprise security policies. Entitlement & Access Governance Manage entitlements across web and email security tools, ensuring appropriate access and adherence to least-privilege principles. Maintain documentation and operational controls to support compliance, audits, and regulatory obligations. Controls, Procedures & Continuous Improvement Maintain and update process documentation, operational procedures, and control evidence. Support control design, testing, and remediation activities. Identify opportunities to strengthen existing processes, improve efficiency, and enhance overall security posture. Additionally, you will: Lead or participate in computer security operational activities for moderately complex events Conduct technical investigation of security related incidents and post incidents digital forensics to identify causes and recommend future mitigation strategies Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to web and email security Review and correlate security logs Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals

Requirements

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Nice To Haves

Experience in information security, DLP, or web/email security technologies.
Familiarity with enterprise web filtering platforms, URL categorization, or proxy services.
Demonstrated experience with Cloud Access Security Brokers (CASBs)
Strong analytical, investigative, and problem‑solving skills.
Knowledge of regulatory and compliance requirements in a large financial institution.
Ability to work in a fast‑paced, operational environment with Service Level Agreements (SLAs) and high scrutiny.
Excellent communication skills with the ability to partner effectively across business and technology teams.

Responsibilities

Monitor external connectivity to identify access attempts to unsanctioned or inappropriate websites.
Conduct detailed research on requested or newly discovered sites to determine their risk profile, category, and compliance impact.
Block Internet resources determined to be invalid, unsafe, malicious, or out of policy for Wells Fargo connectivity.
Review and process unblock requests based on documented business justification, risk assessment, and organizational standards.
Serve as an intake point for inquiries related to restricted emails, blocked content, and delivery issues.
Analyze and resolve email‑related exceptions while ensuring alignment with enterprise security policies.
Manage entitlements across web and email security tools, ensuring appropriate access and adherence to least-privilege principles.
Maintain documentation and operational controls to support compliance, audits, and regulatory obligations.
Maintain and update process documentation, operational procedures, and control evidence.
Support control design, testing, and remediation activities.
Identify opportunities to strengthen existing processes, improve efficiency, and enhance overall security posture.
Lead or participate in computer security operational activities for moderately complex events
Conduct technical investigation of security related incidents and post incidents digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to web and email security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals