Director, Cloud Security Specialist

Fidelity Technology Group • Merrimack, NH

109d • Onsite

About The Position

The Cloud Security Center of Excellence within Fidelity Enterprise Cyber Security (ECS) is seeking a cloud or data platforms focused security engineer who has broad security domain knowledge including platform access models, logical perimeter, encryption, compliance, threat modeling and risk mitigation. As part of the team, they will deliver bar-raising security consultation and guidance within various cloud service providers (CSPs) and Fidelity hosted platforms. The ideal candidate should have deep understanding of at least one CSP and the unique challenges of securing cloud workloads and managing the security posture of large scale environments in a DevOps operating model.

Requirements

• 5+ years of experience in securing infrastructure, platforms, and compliance.
• Proven experience in consulting or advisory capacity.
• Understand and promote security best practices at all levels of the organization.
• Strong understanding of cloud service providers: AWS, Azure, etc.
• Securing Data Platforms such as Kafka, Oracle, PostgreSQL, etc.
• Multi-tenant platform or service delivery.
• Continuous Compliance and Auditing methodologies.
• Scripting automation or developing software: Python, PowerShell, NodeJS, etc.
• Implementing infrastructure-as-code concepts and technologies.
• Curiosity and self-starting nature to learn how systems work and integrate; identify risks and opportunities for improvement or innovation; and relentlessly pursue implementation of scalable security solutions.
• Passion for security, innovation, and continuous improvement.
• Adaptability to change and context switching.
• Ability to design future direction of security capabilities and controls.
• Empathy and communication skills to understand and communicate complex subjects with associates of varying business and technical backgrounds.
• Ability to work with global teams.
• Strong understanding of various cloud service delivery models including IaaS, SaaS, and PaaS leveraging technologies including containers; APIs; data systems; and artificial intelligence.

Nice To Haves

• Exposure to or securing Artificial Intelligence.

Responsibilities

• Identify opportunities to improve security posture and execute or influence their implementation in collaboration with security stakeholders, platforms, and application teams.
• Provide thought leadership, influence, mentor and educate others to build secure applications and multi-tenant platforms in public cloud.
• Design, scale, and deploy cloud security controls and services.
• Leverage CI/CD tooling to build security and governance capabilities into DevOps processes.
• Bridge building between security and platform teams to motivate and illuminate the 'What, Why, and How' to solve complex security requirements.
• Provide security guidance and support to technologists building platforms and applications.
• Collaborate with audit and risk teams on risk identification and validation of controls.

Benefits

• Hybrid work model requiring associates to work onsite every other week.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers