Fidelity will not provide immigration sponsorship for this position.

Job Description:

Position Description:

Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement activities. Supports the integration of security requirements into projects by collaborating with technology and business teams throughout the system lifecycle. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts. Supports compliance with organizational policies and applicable regulatory or standards‑based security requirements. 

Primary Responsibilities:

• Develops original and creative security solutions to address ongoing cybersecurity efforts.
• Designs security controls, configurations, or subsystems for major projects and across multiple platforms.
• Implements and supports cybersecurity solutions for multiple projects supporting several divisional initiatives.
• Supports and performs all phases of security testing, including vulnerability assessments, security validation, and remediation activities, leading to implementation.
• Assists in the planning and execution of security validation and acceptance testing activities.
• Develops comprehensive cybersecurity documentation for multiple systems supporting several corporate initiatives.
• Responsible for post-implementation security testing and analysis to identify and resolve issues.
• Establishes security plans and task-level work plans for projects of moderate scope.
• Works on complex assignments and often across multiple phases of a project.
• Performs independent and complex technical and functional security analysis for multiple projects supporting several initiatives.

Education and Experience:

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments. 

Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments.

Skills and Knowledge:

Candidate must also possess:

·         Demonstrated Expertise validating the effectiveness of perimeter and application security controls through targeted manual testing and automated vulnerability assessments, using Nmap, Burp Suite, Nessus, and Qualys to identify external attack surfaces, analyze traffic patterns, detect misconfigurations, and confirm control efficacy.  

·         Demonstrated Expertise identifying security risks and control gaps across access control frameworks, identity and access management (IAM), vulnerability management, data protection mechanisms, and web application security, ensuring alignment with internal security policies, technical standards, and regulatory compliance requirements. 

·         Demonstrated Expertise developing and using scripts in Python, Bash, PowerShell, or SQL to automate security workflows, enhance monitoring and analysis processes, support vulnerability remediation efforts, and improve operational efficiency within security platforms and tooling; and performing the security control using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response. 

·         Demonstrated Expertise supporting change management and incident response activities, including investigating security events and troubleshooting complex issues through log analysis and telemetry from security, application, and infrastructure systems, to determine root cause and resolution within established procedures.

#PE1M2

#LI-DNI

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.