Senior Software Engineer - Data Loss Prevention

Fidelity•Westlake, TX

3h•Hybrid

About The Position

The Role Seeking a hardworking, curious person who thrives in an exciting, fast-paced team. This team engages in high-profile security projects to improve Fidelity’s security posture and prevent data leakage. The candidate will be immersed in a setting that spans various operating systems, addressing a constantly evolving threat landscape, working with numerous security teams. The Expertise You Have and The Skills You Bring The ideal candidate should have either a Bachelor's degree with five years of experience, or a Master's degree with three years of experience in Computer Science, Engineering, Information Technology, or a related field, having crafted, developed, tested, and implemented front-end and back-end applications in a multi-OS environment and using secure software lifecycle principles. Your background should have a significant focus on Data, Cyber, and Cloud security, with experience in defining and implementing data security strategies & controls to protect critical information. We are looking for a curious mind with strong analytical skills to identify risks and problem solve, who is a quick learner and can easily adapt to new tools and technology. Knowledge of cybersecurity threats and incident response, preferably also with a foundation in insider threat and data loss prevention Confirmed ability to develop scalable back-end solutions using Python frameworks including Django, Flask, or FastAPI. Crafting responsive user interfaces (UI) with front-end technologies like Angular, JavaScript, and PHP. Performing data automation and analysis with MySQL, Postgres, and NoSQL databases such as DynamoDB. Adheres to secure coding practices. Experience setting up cloud infrastructure within Amazon Web Services (AWS) or Azure to automate processes, working in multi-cloud environments; developing and deploying applications using AWS (Lambda, KMS, API Gateway, and SQS) and Azure services (Virtual Machines, Blob Storage, and App services), implementing Infrastructure as Code (IaC) using ARM templates, Terraform, and CloudFormation; and maintaining network services (firewalls, VPNs, Domain Name System (DNS) or load balancing) using cybersecurity tools (AWS Shield, Azure Security Center, or WAF) Experience building CI/CD pipelines using Jenkins, uDeploy, JFrog Artifactory, or GitHub Actions; scripting with Shell, Groovy, or PowerShell; evaluating code quality using SonarQube tools, Azure Monitor, CloudWatch and Datadog; performing testing in Python, and implementing container platforms using Docker and Kubernetes and integrating security testing in CI/CD pipelines using GitHub secret scanning, OWASP principles, compliance checks, and vulnerability scanning, as well as using secure web gateways and proxy solutions Some experience performing in the full Secure Software Development Lifecycle (SSDLC) translating business requirements into technical specifications, following an architecture design, and testing and providing technical support to ensure the project delivery meets client expectations The Team The Cybersecurity Analyst will be working on a team of systems and software engineers focusing on insider risks and Data Loss Prevention (DLP). This role will involve working closely with Data Analytics, Insider Operations and Security Operations Center (SOC) teams to help mitigate risk across Fidelity’s computing environment.

Requirements

Bachelor's degree with five years of experience, or a Master's degree with three years of experience in Computer Science, Engineering, Information Technology, or a related field, having crafted, developed, tested, and implemented front-end and back-end applications in a multi-OS environment and using secure software lifecycle principles.
Significant focus on Data, Cyber, and Cloud security, with experience in defining and implementing data security strategies & controls to protect critical information.
Strong analytical skills to identify risks and problem solve, who is a quick learner and can easily adapt to new tools and technology.
Knowledge of cybersecurity threats and incident response, preferably also with a foundation in insider threat and data loss prevention
Confirmed ability to develop scalable back-end solutions using Python frameworks including Django, Flask, or FastAPI.
Crafting responsive user interfaces (UI) with front-end technologies like Angular, JavaScript, and PHP.
Performing data automation and analysis with MySQL, Postgres, and NoSQL databases such as DynamoDB.
Adheres to secure coding practices.
Experience setting up cloud infrastructure within Amazon Web Services (AWS) or Azure to automate processes, working in multi-cloud environments; developing and deploying applications using AWS (Lambda, KMS, API Gateway, and SQS) and Azure services (Virtual Machines, Blob Storage, and App services), implementing Infrastructure as Code (IaC) using ARM templates, Terraform, and CloudFormation; and maintaining network services (firewalls, VPNs, Domain Name System (DNS) or load balancing) using cybersecurity tools (AWS Shield, Azure Security Center, or WAF)
Experience building CI/CD pipelines using Jenkins, uDeploy, JFrog Artifactory, or GitHub Actions; scripting with Shell, Groovy, or PowerShell; evaluating code quality using SonarQube tools, Azure Monitor, CloudWatch and Datadog; performing testing in Python, and implementing container platforms using Docker and Kubernetes and integrating security testing in CI/CD pipelines using GitHub secret scanning, OWASP principles, compliance checks, and vulnerability scanning, as well as using secure web gateways and proxy solutions
Some experience performing in the full Secure Software Development Lifecycle (SSDLC) translating business requirements into technical specifications, following an architecture design, and testing and providing technical support to ensure the project delivery meets client expectations