Senior Cybersecurity Analyst

Fidelity Investments•Westlake, TX

2d•Onsite

About The Position

Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement activities. Supports the integration of security requirements into projects by collaborating with technology and business teams throughout the system lifecycle. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts. Supports compliance with organizational policies and applicable regulatory or standards-based security requirements. The role designs, implements, and supports cybersecurity solutions for multiple projects and divisional initiatives, and conducts technical and functional security analysis. It supports security testing and validation from planning through post-implementation analysis, including vulnerability remediation and acceptance testing. The position also establishes security plans and task-level work plans for projects of moderate scope and works on complex assignments across multiple project phases. The position requires a bachelor's degree in a related field and three years of relevant experience, or a master's degree in a related field and one year of relevant experience, focused on enterprise-scale perimeter and application security controls for internet-facing applications across cloud and edge computing environments. Fidelity states that it will not provide immigration sponsorship for this position. Its onsite working model is transitioning through a phased regional and role-based rollout; current onsite expectations vary, and may evolve.

Requirements

Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent), and three years of experience as a Senior Cybersecurity Analyst or in a closely related occupation designing, implementing, and operating enterprise-scale perimeter and application security controls for internet-facing applications across cloud and edge computing environments; or a master's degree in one of those fields (or foreign education equivalent) and one year of such experience.
Demonstrated expertise validating perimeter and application security controls with targeted manual testing and automated vulnerability assessments using Nmap, Burp Suite, Nessus, and Qualys.
Demonstrated expertise identifying security risks and control gaps in access control frameworks, IAM, vulnerability management, data protection mechanisms, and web application security, aligned with internal policies, technical standards, and regulatory requirements.
Demonstrated expertise developing and using Python, Bash, PowerShell, or SQL scripts to automate security workflows and improve monitoring, analysis, remediation, and operational efficiency.
Demonstrated expertise performing security controls using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response.
Demonstrated expertise supporting change management and incident response, investigating security events, and troubleshooting complex issues using logs and telemetry from security, application, and infrastructure systems to determine root cause and resolution within established procedures.

Responsibilities

Develop original and creative security solutions for ongoing cybersecurity efforts.
Design security controls, configurations, or subsystems for major projects and across multiple platforms.
Implement and support cybersecurity solutions for multiple projects and divisional initiatives.
Support and perform all phases of security testing, including vulnerability assessments, security validation, and remediation activities.
Assist in planning and executing security validation and acceptance testing.
Develop comprehensive cybersecurity documentation for multiple systems and corporate initiatives.
Conduct post-implementation security testing and analysis to identify and resolve issues.
Establish security plans and task-level work plans for projects of moderate scope.
Perform independent and complex technical and functional security analysis for multiple projects and initiatives.
Conduct security monitoring and analyze security events, findings, and reports to support incident response and continuous improvement.
Collaborate with technology and business teams to integrate security requirements throughout the system lifecycle.
Support compliance with organizational policies and applicable regulatory or standards-based security requirements.
Validate perimeter and application security controls through manual testing and automated vulnerability assessments.
Identify security risks and control gaps across access control, IAM, vulnerability management, data protection, and web application security.
Develop and use scripts to automate security workflows, monitoring, analysis, and vulnerability remediation.
Perform security controls involving WAF, bot mitigation, API security, and external threat incident response.
Support change management and incident response, investigating security events and troubleshooting issues through log and telemetry analysis to determine root cause and resolution.