Principal Engineer - Application Security: Secure Development

Wells Fargo

Closes in 6 days Hybrid

Quick summary

Work type: Hybrid
Location: Charlotte, NC · Chandler, AZ
Posted: 5 days ago
Closes: Jun 12, 2026 (soon)

Market check

Salary context

How this pay compares to similar roles

Similar $186k

$132k most similar roles pay here $240k

This listing doesn't post a salary. Most similar roles pay $153,562–$217,950.

Based on 240 similar postings.

Employer

About Wells Fargo

Wells Fargo & Company is one of the largest banks in the United States, providing banking, investment, mortgage, and consumer and commercial finance products and services nationwide. Industry: Banking & Financial Services

Wells Fargo currently has 91 open roles on FindRole.

Listed pay typically runs $151,000–$239,000 across 54 roles with salary data.

Most-posted roles

View all roles at Wells Fargo

At a glance

TL;DR · Principal Engineer - Application Security: Secure Development

Apply Now Log in to save

Wells Fargo is seeking a Principal Engineer to lead a team of Application Security Champions supporting the Technology development teams that deliver centralized shared services. This role involves establishing standards, playbooks, and metrics to scale secure development practices across non-CIO engineering teams, integrating security controls into CI/CD pipelines, and overseeing threat modeling for complex applications. The ideal candidate has deep expertise in secure application architecture, coding practices, and vulnerability analysis, with hands-on experience securing modern tech stacks like Java, .NET, Python, or JavaScript. They should also have a background in software engineering, experience with AI security, and the ability to design cloud-native security controls for Azure, AWS, or GCP environments.

Skills

Java .NET Python JavaScript TypeScript Node.js Go CI/CD SAST SCA DAST IaC scanning container security API security testing code review threat modeling runtime protection AI security Azure AWS GCP software supply chain security Zero Trust policy-as-code

What you'll do

Lead and mentor Application Security Champions to establish standards and metrics for secure development practices.
Drive integration of security controls into CI/CD pipelines to enable automated detection and remediation of vulnerabilities.
Oversee threat modeling, vulnerability assessments, and secure design reviews for high-risk applications and shared services.
Champion the secure adoption of emerging technologies by defining risk mitigation strategies and guardrails.
Secure applications built in modern technology stacks like Java, .NET, Python, and JavaScript/TypeScript.

What we're looking for

7+ years of experience in Application Security Engineering
Deep expertise in secure application architecture, coding practices, threat modeling, and common vulnerabilities
Hands-on experience securing modern technology stacks (Java, .NET, Python, etc.)
Experience integrating security into CI/CD pipelines and developer workflows
Strong background in AI security and securing AI-enabled applications
Proven ability to design security controls for cloud-native systems in Azure, AWS, or GCP
Certifications such as CSSLP, GIAC GWEB, CISSP, GWAPT, CCSP

Similar roles

Principal Application Security Engineer

Upstart

Remote (San Mateo, CA) 144 days ago $190,600–$263,900

Java Python Ruby SAST DAST SCA CI/CD API Security Microservices REST GraphQL AWS Kubernetes Terraform GitLab Jenkins GitHub PostgreSQL MongoDB OAuth OpenID Connect OAuth2 JSON Web Tokens PCI DSS ISO 27001 NIST Cybersecurity Framework

Remote

Save

Principal Engineer - Security Architecture

Target

Remote (7000 Target Pkwy N,Ncd-0375 Brooklyn Park,Mn 55445, US) 4 days ago $168,000–$303,000

GCP Kubernetes Python Go Java Cryptography NIST ISO/IEC 27001 CI/CD Docker Terraform AWS Azure SIEM Firewalls IDS/IPS DLP Cloud Armor VPC Service Controls Organization constraints OPA Rego Vertex AI SCC Wiz

Remote Hybrid

Save