Senior Cybersecurity Ops & Response Analyst

Fidelity Investments Inc.; Galway; On-site; EUR 90,000 - 130,000; Full time

Job summary

Fidelity Investments Inc. in Ireland is seeking a Senior Incident Responder to join our Security Operations Center. You will investigate and contain threats across our global environment, driving improvements in detection and response capabilities.

The role requires hands-on incident handling, malware triage, and collaboration with cross‑functional teams to reduce risk and deliver defensible outcomes for customers and affiliates.

Qualifications

• Established cybersecurity background and threat landscape understanding.
• 3+ years in Information Security incident response or SOC investigations.
• Experience investigating real intrusions, not just alert triage.
• Familiarity with enterprise SIEM, SOAR, and EDR tooling.
• Forensics skills across Windows and Linux.
• Strong network traffic analysis and attacker tradecraft understanding.
• Experience with cloud environments (Azure, AWS) and identity platforms (Entra ID/AD).
• Proficiency in Python for data parsing and analysis.
• Excellent written and verbal communication during active incidents.

Responsibilities

• Respond to incidents from detection through containment, eradication, and recovery.
• Collaborate with infrastructure, legal, and business teams on high-severity events.
• Perform forensics to scope compromise and identify indicators.
• Triage and analyze malware to assess capability and impact.
• Produce defensible incident documentation, timelines, and post-incident reports.
• Develop and refine threat detection content based on MITRE ATT&CK.
• Participate in threat hunting to close visibility gaps.
• Contribute to incident response playbooks and escalation paths.
• Explore automation opportunities to improve response workflows.

Skills

Cybersecurity

IR/Forensics

Real intrusions

SIEM/SOAR/EDR

Windows/Linux forensics

Network analysis

Cloud & Identities

Python scripting

Communication skills

Tools

SIEM

SOAR

EDR

Job description

Job Description

Senior Incident Responder - Security Operations Center

The Opportunity

Fidelity's Security Operations Center is looking for a Senior Incident Responder to join the team investigating and containing threats against our global environment. This is a high-impact individual contributor role where your analysis and decisions directly reduce risk for Fidelity, its affiliates, partners, and millions of customers.

You won't just close tickets. You'll work investigations end to end, contribute to containment and eradication, and turn every incident into lasting improvements in our detection and response capability. If you thrive under pressure and are relentless about finding the truth in the data, this role was built for you.

What You'll Do

Respond to Incidents

• Investigate security incidents from detection through containment, eradication, and recovery
• Work escalated and high-severity events alongside infrastructure, application, legal, and business teams
• Conduct network, host, cloud, and identity-based forensic analysis to scope compromise and identify indicators
• Perform malware triage and analysis to determine capability, persistence, and impact
• Produce clear, defensible incident documentation, timelines, and post-incident reports for technical and executive audiences

Drive Detection & Hunting

• Develop and refine threat detection content informed by attacker TTPs (MITRE ATT&CK)
• Participate in threat hunting initiatives that uncover gaps in visibility and coverage
• Feed lessons learned from investigations back into detections, runbooks, and automation
• Support alert triage during surge periods and share investigative technique with junior analysts

Shape Strategy

• Contribute to SOC leadership strategy, roadmap planning, and capability development
• Help build and exercise incident response playbooks, tabletop scenarios, and escalation paths
• Identify opportunities to apply automation and AI/LLM technologies to investigative workflows
• Champion continuous improvement across tools, processes, and team capabilities

Required

What You Bring

• Established cybersecurity background. You understand the threat landscape, common attack vectors, and defensive operations without needing to be taught the fundamentals
• 3+ years in Information Security incident response, digital forensics, or SOC investigations
• Demonstrated experience investigating real intrusions, not just alert queue triage
• Deep familiarity with SIEM, SOAR, and EDR tooling in an enterprise environment
• Strong host-based forensics skills across Windows and Linux (file system, memory, registry, event log, and artifact analysis)
• Solid understanding of network protocols, network traffic analysis, and attacker tradecraft
• Experience investigating incidents in cloud environments (Azure, AWS) and identity platforms (Entra ID / Active Directory)
• Working proficiency in a scripting language such as Python for data parsing, enrichment, and analysis at scale
• Excellent written and verbal communication skills, including the ability to convey findings clearly during an active incident

Preferred

• Malware reverse engineering or advanced memory forensics experience
• Experience investigating containerized and Kubernetes workloads
• Experience applying LLMs or AI to security operations workflows (triage assistance, enrichment, content generation)
• Familiarity with threat intelligence tradecraft and adversary attribution
• Experience with eDiscovery, legal hold, or regulatory breach notification processes
• Detection engineering experience in a modern SIEM query language
• Industry certifications: GCIH, GCFA, GCFE, GNFA, GREM, OSCP, CISSP, or equivalent

Who Thrives Here

• You stay calm and methodical when the stakes are high and the picture is incomplete
• You are genuinely eager to learn new tools, new techniques, and new ways of thinking. You adapt quickly and seek out growth opportunities rather than waiting for them
• You default to automating the repetitive and scaling the manual
• You have relentless curiosity and dig until you understand why, not just what
• You teach generously and listen actively; you recognize that good ideas come from everywhere
• You embrace change rather than resist it. When the landscape shifts, you shift with it
• You challenge the status quo with data and better alternatives, not just opinions

Category

Information Technology