below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$156,600–$213,375.
Based on 240 similar postings.
Employer
About Wells Fargo
Wells Fargo & Company is one of the largest banks in the United States, providing banking, investment, mortgage, and consumer and commercial finance products and services nationwide. Industry: Banking & Financial Services
Wells Fargo currently has
32 open roles
on FindRole.
Listed pay typically runs
$159,000–$254,000
across 15 roles with salary data.
The Principal Cybersecurity Incident Response Engineer joins the Cybersecurity team as a Tier 3 technical escalation point for complex, high-impact security incidents. This role involves leading technical investigations to determine attack paths, affected assets, and business impacts while providing guidance to lower-tier analysts. Key responsibilities include developing containment and recovery recommendations, correlating telemetry across endpoint, network, identity, and cloud environments, and performing advanced analysis of attacker behaviors and persistence mechanisms. The position requires proficiency in EDR, XDR, SIEM tools, and the MITRE ATT&CK framework. Candidates must utilize AI-assisted development tools like GitHub Copilot for system design and troubleshooting. The role focuses on maturing incident response capabilities by identifying gaps, developing detection logic, and translating lessons learned into measurable improvements in defensive processes and security telemetry.
Lead technical investigations of complex, high-severity cybersecurity incidents to determine scope, attack paths, and business impact.
Serve as a senior technical escalation point providing guidance to Tier 1 and Tier 2 analysts during complex investigations.
Develop containment, eradication, and recovery recommendations while coordinating technical response across security and infrastructure teams.
Correlate telemetry across endpoint, network, identity, and cloud environments to identify attacker behaviors and persistence mechanisms.
Translate investigative findings into actionable detection logic, response procedures, and automation opportunities to close security gaps.
Mentor analysts and develop investigation playbooks, documentation, and reusable analytical methods to mature incident response capabilities.
Participate in tabletop exercises and root cause analysis to translate lessons learned into measurable improvements in technology and processes.
Utilize AI-assisted development and analysis tools to accelerate system design, coding, testing, and troubleshooting while ensuring security compliance.
What we're looking for
7+ years of Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
Experience leading Incident Response during major incidents (preferred).
Experience with enterprise incident response, security operations, and EDR/XDR tools (preferred).
Experience with SIEM tools, large scale log analysis, and network/endpoint forensics (preferred).
Knowledge of malware analysis, attacker TTPs, the MITRE ATT&CK framework, and threat intelligence (preferred).
Experience with detection engineering, threat hunting, and scripting or automation for security investigations (preferred).
Ability to communicate complex technical findings to technical and nontechnical stakeholders (preferred).
Ability to mentor less experienced responders and influence teams without positional authority (preferred).
Kubernetes
Google Cloud Platform
AWS
Microsoft Azure
Python
Go
Rust
Java
SQL
NoSQL
Distributed Systems
Observability
Generative AI
Agentic AI
SAST
DAST
Load Balancing
Networking
GitHub Copilot