Principal Cybersecurity Analyst

Soteria Reinsurance Ltd.; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Onsite Working Model

Job summary

Fidelity Investments in Durham, NC seeks a Principal Cybersecurity Analyst to design and implement perimeter security across on-premises and cloud environments, including email security, DNS, DDoS protection, and incident response. You will lead risk assessments, threat analysis, and security operations to stop external attacks while enhancing data protection and resilience.

The role requires advanced knowledge of security architectures, hands-on testing with industry tools, and collaboration

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field and five years of experience as a Principal Cybersecurity Analyst designing perimeter security defenses for enterprise networks.
• Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field and three years of relevant experience designing perimeter security defenses.

Responsibilities

• Makes information security risk determinations based on intelligence analysis.
• Develops plans to safeguard computer files against unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Monitors current reports of computer viruses to determine when to update virus protection systems.
• Encrypts data transmissions and erects firewalls to conceal confidential information in transit and prevent tainted transfers.
• Performs risk assessments and tests data processing systems to ensure security measures.
• Modifies security files to incorporate new software or change access status.

Skills

Secure routing protocols

Encryption protocols

Firewalls & ACLs

Manual & automated pentesting

Nmap, DirBuster, Metasploit

Nessus, Qualys, BurpSuite

Security monitoring tools

IDS/IPS

Incident response

Splunk, Wireshark, CrowdStrike

Education

Bachelor's degree in Computer Science/Engineering/IT or related

Five years as Principal Cybersecurity Analyst (or similar)

Master's degree in CS/Engineering/IT or related

Tools

Cisco ASA

Juniper SRX

Check Point Firewalls

Splunk

QRadar

Sevone

Nessus

Qualys

BurpSuite

Job description

## Principal Cybersecurity AnalystApplylocations: Durham, NCtime type: Full timeposted on: Posted Todaytime left to apply: End Date: August 25, 2026 (30+ days left to apply)job requisition id: 2132376## ## Job Description:**Position Description**:**Note: Fidelity will not provide immigration sponsorship for this position.**Performs functions related to Network and Perimeter specialized Security Engineers including Email Security, DNS, Distributed Denial of Service (DDoS), IDS/IPS and cloud security. Understands cyber threats, malicious cyber threat actor motivations, and capabilities relevant to regions of interest. Builds Email Security, Email and Web Advance Threat Protection, DNS, DDoS, IDS/IPS and cloud security. Stops external attacks to firm systems using endpoint controls includes firewall, antivirus, and host-based intrusion systems. Manages Intrusion Prevention System (IPS), Advance Threat Protection (ATP), Cloud Security and Email Security operational functions.**Primary Responsibilities:*** Makes information security risk determinations based on intelligence analysis.* Develops plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.* Monitors current reports of computer viruses to determine when to update virus protection systems.* Encrypts data transmissions and erects firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.* Performs risk assessments and executes tests of data processing systems to ensure functions of data processing activities and security measures.* Modifies computer security files to incorporate new software, correct errors, or change individual access status.**Education and Experience**:Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and five (5) years of experience as a Principal Cybersecurity Analyst (or closely related occupation) designing and implementing perimeter security defense solutions to protect enterprise networks from external threats, unauthorized access, and DDoS attacks, in on premises and Cloud environments.Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Cybersecurity Analyst (or closely related occupation) designing and implementing perimeter security defense solutions to protect enterprise networks from external threats, unauthorized access, and DDoS attacks, in on premises and Cloud environments.**Skills and Knowledge**:Candidate must also possess:* Demonstrated Expertise (“DE”) designing enterprise networks requiring security using secure routing protocols (RIPv2 and OSPF), encryption protocols (IPSec and SSL or TSL), and robust firewalls and access control implementation.* DE performing manual and penetration testing, using Nmap, Dirbuster, and Metasploit to secure enterprise network from unauthorized access; and performing automated penetration testing using Nessus, Qualys, and Burpsuite to identify vulnerabilities, analyze traffic, and validate security controls.* DE maintaining security systems (Cisco ASA, Juniper SRX, or Check Point Firewalls), intrusion detection and prevention systems, force point proxy servers, and log management tools (Spunk, Qradar, and Sevone) to monitor and troubleshoot network traffic.* DE engaging in incident handling -- threat discovery, triage, containment, recovery, and remediation plan coordination -- using Splunk, Wireshark, Crowdstrike, Sentinelone, and Servicenow to ensure rapid response and resolution.#PE1M2#LI-DNIFidelity’s Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.## ## Certifications:## ## Category:## Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.### About UsAt Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want! We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experiences. For information about working at Fidelity, visit FidelityCareers.com.Fidelity Investments is an equal opportunity employer.