Senior Cybersecurity Analyst

Fidelity•Westlake, TX

About The Position

Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement. Collaborates with technology and business teams throughout the system lifecycle to integrate security requirements into projects. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts, and supports compliance with organizational policies and applicable regulatory or standards-based security requirements. The role develops and implements cybersecurity solutions across multiple projects and divisional initiatives, performs complex security analysis, testing, validation, and remediation, and creates security plans and task-level work plans for projects of moderate scope. Work may span multiple phases of complex projects and includes post-implementation testing and analysis. The position requires a bachelor's degree in a relevant field and three years of specified experience, or a master's degree in a relevant field and one year of specified experience. The experience must involve designing, implementing, and operating enterprise-scale perimeter and application security controls for internet-facing applications across cloud and edge computing environments. The candidate must also demonstrate expertise in security control testing, risk and control-gap analysis, scripting and automation, security tooling, and incident response.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent), plus three years of experience as a Senior Cybersecurity Analyst or in a closely related occupation designing, implementing, and operating enterprise-scale perimeter and application security controls for internet-facing applications across cloud and edge computing environments; or a master’s degree in one of those fields (or foreign education equivalent), plus one year of that experience.
Demonstrated expertise validating perimeter and application security controls through targeted manual testing and automated vulnerability assessments using Nmap, Burp Suite, Nessus, and Qualys.
Demonstrated expertise identifying security risks and control gaps across access control frameworks, IAM, vulnerability management, data protection, and web application security, with alignment to internal policies, technical standards, and regulatory requirements.
Demonstrated expertise developing and using Python, Bash, PowerShell, or SQL scripts to automate security workflows, improve monitoring and analysis, support vulnerability remediation, and increase operational efficiency.
Demonstrated expertise performing security control using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response.
Demonstrated expertise supporting change management and incident response, including investigation and troubleshooting using log analysis and telemetry from security, application, and infrastructure systems.
Fidelity will not provide immigration sponsorship for this position.

Responsibilities

Develop original and creative security solutions for ongoing cybersecurity efforts.
Design security controls, configurations, or subsystems for major projects and across multiple platforms.
Implement and support cybersecurity solutions for multiple projects and divisional initiatives.
Perform security testing, including vulnerability assessments, security validation, and remediation activities.
Assist in planning and executing security validation and acceptance testing.
Develop comprehensive cybersecurity documentation for multiple systems and corporate initiatives.
Conduct post-implementation security testing and analysis to identify and resolve issues.
Establish security plans and task-level work plans for projects of moderate scope.
Perform independent, complex technical and functional security analysis across multiple projects.
Conduct security monitoring and analyze security events, findings, and reports to support incident response and continuous improvement.
Collaborate with technology and business teams to integrate security requirements throughout the system lifecycle.
Support compliance with organizational policies and applicable regulatory or standards-based security requirements.
Support change management and incident response, investigating security events and troubleshooting complex issues using logs and telemetry to determine root cause and resolution.