SIEM and Data Pipeline Principal Engineer

About this role:
Wells Fargo is seeking a Principal Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.
Wells Fargo is seeking a Principal SIEM Engineer to join our Cybersecurity team. This role will serve as the senior technical authority for log management, data pipeline architecture, and observability engineering across the enterprise. The ideal candidate will lead strategy, design, and implementation efforts for Splunk Cloud, CRIBL Stream, and scalable data ingestion pipelines.
In this role, you will:

• Act as a trusted advisor to leadership on Splunk Cloud and CRIBL architecture decisions.
• Lead resolution of complex engineering challenges across observability and data pipeline domains.
• Translate business objectives and compliance requirements into scalable technical solutions.
• Maintain deep knowledge of industry best practices in log management, data streaming, and observability.
• Drive innovation and continuous improvement across telemetry platforms.
• Serve as the Principal Engineer (SME) for Splunk Cloud architecture, CRIBL Stream deployment, and data pipeline optimization.
• Design and implement scalable log ingestion frameworks using CRIBL and Splunk forwarders.
• Lead strategy and roadmap development for observability and telemetry platforms.
• Collaborate with cybersecurity, infrastructure, and application teams to ensure log fidelity, performance, and security.
• Develop automation and orchestration solutions to streamline data onboarding and enrichment.
• Provide technical oversight and mentorship to engineering teams working on Splunk and CRIBL integrations.
• Evaluate emerging technologies and recommend solutions to enhance data pipeline efficiency and observability capabilities.
• Interface with executive leadership to align technical solutions with business priorities and compliance requirements.

Required Qualifications:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of hands-on experience with Splunk Enterprise or Cloud architecture and administration.
• 3+ years of experience with CRIBL Stream or similar data routing platforms.
• Proven experience designing and managing data pipelines for large-scale enterprise environments.
• Strong understanding of data normalization, enrichment, and transformation techniques.
• Experience with automation tools (e.g., Ansible, Terraform, Python scripting).

Desired Qualifications:

• Certifications in Splunk (e.g., Splunk Certified Architect), CRIBL, or related technologies.
• Experience integrating Splunk with cloud-native services (AWS, Azure, GCP).
• Familiarity with SIEM, SOAR, and threat detection use cases.
• Ability to communicate technical concepts to non-technical stakeholders.
• Experience working in regulated industries such as finance or healthcare.

Job Expectations:

• Ability to travel up to 10% of the time.
• Ability to work in a fast-paced, high-demand environment while balancing multiple priorities.

Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.
$159,000.00 - $305,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Posting End Date:
25 Jan 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.