Senior Analyst - Digital Assets Security

Fidelity Investments•Chicago, IL

1d•$89,000 - $180,000•Onsite

About The Position

We are seeking a highly motivated Senior Security Analyst – Blockchain, Digital Assets & Smart Contract Security to join our Information Security organization. This role will help secure the firm's adoption of blockchain technologies, digital assets, tokenization platforms, and smart contract-enabled solutions. As a subject matter expert in blockchain security, you will partner with engineering, architecture, risk, compliance, and product teams to assess emerging technologies and ensure they are deployed securely and in alignment with the firm's risk appetite, regulatory obligations, and security standards.

Requirements

7+ years of experience in Information Security, Application Security, Security Engineering, or Cyber Risk and a bachelor’s degree in a related field
3+ years of hands-on experience with blockchain, digital assets, or smart contract security
Experience conducting security assessments and threat modeling exercises
Strong understanding of secure software development practices and application security principles
Experience communicating technical risk to both technical and non-technical stakeholders

Nice To Haves

Hands-on experience reviewing Solidity smart contracts
Familiarity with Ethereum, EVM-based platforms, Layer-2 technologies, and blockchain infrastructure
Experience assessing DeFi protocols, tokenization platforms, or digital asset custody solutions
Knowledge of cryptography, public key infrastructure, digital signatures, and key management
Experience using security assessment tools such as: Slither, Mythril, Echidna, Hardhat, or Foundry
Experience in financial services, banking, asset management, fintech, or capital markets
Familiarity with cloud security platforms specifically, AWS
Understanding of regulatory and risk management frameworks
One or more of the following certifications is preferred: CISSP, CISM, CRISC, CCSP, OSCP, GIAC certifications, or Blockchain security certifications

Responsibilities

Lead security assessments, threat modeling, and architecture reviews for smart contracts, decentralized applications (dApps), blockchain infrastructure, and digital asset platforms, identifying and driving remediation of vulnerabilities such as reentrancy, access control weaknesses, oracle manipulation, flash loan attack vectors, MEV/front-running risks, and governance or upgradeability flaws before production deployments
Evaluate the security of blockchain implementations, including digital asset custody solutions, wallet technologies, key management controls, custodians, validator nodes, node gateways, APIs, oracles, cross-chain solutions, tokenization platforms, and staking initiatives, providing recommendations for secure design, implementation, and operation.
Review third-party audit findings and validate remediation efforts while partnering with engineering, product, architecture, and security teams to provide security guidance throughout the development lifecycle and prior to production deployment.
Develop and support security governance, standards, controls, and compliance requirements for blockchain and digital asset technologies, collaborating with Legal, Compliance, Enterprise Risk, and Audit teams to support regulatory examinations, control assessments, and internal audits.
Monitor emerging blockchain threat and industry attack trends, assess impact to the organization, and recommend proactive security controls and risk mitigation strategies.
Investigate blockchain-related security incidents and suspicious on-chain activity, perform root-cause analyses, and drive corrective actions