Senior Cybersecurity Analyst

Fidelity Investments•Westlake, TX

3d•Onsite

About The Position

Identifies, analyzes, and mitigates insider threats and data risks by leveraging multiple data sources and advanced analytical techniques. Assessing the effectiveness of existing threat detection and data protection controls through measurable, data-driven metrics. Builds email security, email and Web advance threat protection, Domain Name System (DNS), Distributed Denial of Service (DDoS), Intrusion Detection Systems (IDS), Intrusion Prevention (IPS), and Cloud security. Recognizes and identifies attacks that may occur in each layer of the Open Systems Interconnection (OSI). Exchanges online protection using Microsoft O365 Suite. Understands malicious URLS using Symantec SiteReview. Prevents external attacks to systems using endpoint controls -- firewall, antivirus, and host-based intrusion systems.

Requirements

Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, Data Science, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) performing in-depth analysis to identify insider risk and data-loss-prevention (DLP) events across exfiltration channels, endpoints, access logs, and database and server audit logs.
Master's degree in Computer Science, Engineering, Information Technology, Information Systems, Data Science, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) performing in-depth analysis to identify insider risk and data-loss-prevention (DLP) events across exfiltration channels, endpoints, access logs, and database and server audit logs.
Demonstrated Expertise (“DE”) designing and implementing data integration pipelines to consolidate structured and unstructured datasets into centralized data warehouses using AWS Glue, Athena, Oracle, MySQL, and Snowflake
DE developing normalized and analytics ready data models using SQL, Python (Pandas, PySpark), Tableau, and Snowflake scripting
DE evaluating and optimizing analytical systems by analyzing KPIs and processing latency to improve data quality, reliability, and reporting performance with Tableau and Power BI.
DE developing data models and performance dashboards using Tableau, Power BI, and Athena, and Snowflake
DE defining analytical metrics and trends
DE optimizing visualization performance on large datasets exceeding million rows
DE preparing root-cause analysis reports and analytical summaries for senior stakeholders using Tableau, Power BI, and Python-based reporting.
DE developing Python-based automation scripts to perform data lookups, metadata joins, transformations, and enrichment of datasets in Athena, Oracle, MySQL, and Snowflake databases
DE implementing data categorization and analytical classification logic using Python
DE integrating analytical outputs into operational dashboards and reports for leadership review using Tableau/ Power BI.
DE designing data architectures and building multi-layered analytical models that combine transactional, behavioral, and operational datasets to establish analytical baselines and detect trends using S3, Athena, Snowflake, and Tableau/Power BI
DE developing Extract, Transform, Load (ETL) workflows and data-quality automation using AWS S3, Snowflake Tasks, CTAS Streams, and stored procedures.

Nice To Haves

Builds email security, email and Web advance threat protection, Domain Name System (DNS), Distributed Denial of Service (DDoS), Intrusion Detection Systems (IDS), Intrusion Prevention (IPS), and Cloud security.
Recognizes and identifies attacks that may occur in each layer of the Open Systems Interconnection (OSI).
Exchanges online protection using Microsoft O365 Suite.
Understands malicious URLS using Symantec SiteReview.
Prevents external attacks to systems using endpoint controls -- firewall, antivirus, and host-based intrusion systems.

Responsibilities

Monitors and investigates user behavior for indicators of potential insider threats, using data-driven behavioral analytics.
Creates and maintains dashboards, reports, and executive summaries that communicate emerging risks, detection outcomes, and trends to technical and business audiences.
Recommends improvements to detection rules, monitoring coverage, and escalation procedures, using findings from effectiveness reviews and incident post-mortems.
Develops metrics to assess the accuracy and coverage of insider threat detections and controls.
Tracks false positive and negative rates, detection latency, and incident response outcomes to improve detection logic.
Partners with risk, compliance, and Information Security Officers (ISOs) to share finding, generate awareness, and influence how business groups manage insider risks.