# Principal Cybersecurity Incident Response Engineer at Wells Fargo

Wells Fargo is hiring a Principal Cybersecurity Incident Response Engineer. Level rates it Little AI ●○○○; you can [apply on Wells Fargo](https://jobsbylevel.com/go/9e4d3412-f31b-4fa2-bfb3-f4a4185527e7?utm_medium=ai-agent).

AI Level 1, AI centrality 33 out of 100. CHANDLER, AZ.

## Details

- Company: [Wells Fargo](https://jobsbylevel.com/companies/wells-fargo)
- AI level: AI Level 1 (score 33 out of 100)
- Location: CHANDLER, AZ
- Posted: November 6, 2026
- Apply: https://jobsbylevel.com/go/9e4d3412-f31b-4fa2-bfb3-f4a4185527e7?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=principal-cybersecurity-incident-response-engineer-at-wells-fargo-5af7d2

## Description

About this role: Wells Fargo is seeking a Principal Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com. The Tier 3 Principal Cybersecurity Incident Response Engineer serves as a senior technical escalation point for complex, high impact, and potentially enterprise significant cybersecurity incidents. The role provides advanced investigation, containment, remediation, and technical leadership while helping mature incident response capabilities across the organization. Tier 3 operates beyond initial triage and investigation, focusing on incidents requiring deeper technical analysis, cross functional coordination, and development of repeatable detection and response capabilities. In this role, you will: Lead technical investigation of complex and high severity cybersecurity incidents; determine scope, attack path, affected assets, and potential business impact Serve as an escalation point for Tier 1 and Tier 2 analysts; provide technical guidance for responders during complex investigations Develop containment, eradication, and recovery recommendations; coordinate technical response activities with security, infrastructure, application, and other appropriate teams Support major incident and crisis response activities when required Correlate information across endpoint, network, identity, cloud, application, and security telemetry; perform advanced analysis to identify attacker behaviors, persistence mechanisms, lateral movement, and indicators of compromise Apply threat intelligence and attacker tactics, techniques, and procedures to active investigations; translate investigative findings into actionable detection and response opportunities Identify gaps exposed through incidents and investigations; develop or recommend new detection logic, investigative techniques, response procedures, and automation opportunities Partner with engineering and security platform teams to improve visibility and response effectiveness; help operationalize new cybersecurity technologies and capabilities Mentor analysts and facilitate knowledge transfer; develop investigation playbooks, documentation, and reusable analytical methods; provide technical leadership without requiring formal people management responsibilities Participate in tabletop exercises, simulations, after action reviews, and root cause analysis; translate lessons learned into measurable improvements in processes, technology, telemetry, and response procedures; evaluate emerging technologies and techniques that could strengthen incident response capabilities Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents) Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions Understand and account for model limitations, security risks, and operational considerations Apply AI responsibly in development and production environments Ensure AI usage aligns with security, compliance, privacy, and ethical standards Required Qualifications: 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications: Experience leading Incident Response during major incidents Experience with enterprise incident response and security operations Experience investigating incidents with endpoint detection and response (EDR) and extended detection and response (XDR) tools Experience with security information and event management (SIEM) tools and large scale log analysis Knowledge and understanding of network and endpoint forensics Experience with identity and authentication investigations Experience with cloud security investigations Knowledge and understanding of malware analysis and attacker tactics,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/principal-cybersecurity-incident-response-engineer-at-wells-fargo-5af7d2

Source: https://jobsbylevel.com/jobs/principal-cybersecurity-incident-response-engineer-at-wells-fargo-5af7d2

## Cite this page

Level. https://jobsbylevel.com/jobs/principal-cybersecurity-incident-response-engineer-at-wells-fargo-5af7d2.

Get job alerts: https://jobsbylevel.com/newsletter