Principal Cybersecurity Analyst

Fidelity; Durham (NC); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

On-site health centers

Fully paid parent leave

On-site wellness facilities

Job summary

Fidelity is seeking a Principal Cybersecurity Analyst to lead network and perimeter security efforts, including Email Security, DNS, DDoS, IDS/IPS and cloud security. You will defend enterprise networks with firewall, endpoint controls and incident response tools.

This role requires a Bachelor's or Master's in a related field with several years of experience, hands-on experience with enterprise security technologies (Nessus, Splunk, Cisco ASA, Forcepoint), and the ability to translate threat

Qualifications

• Bachelor’s degree in CS/Engineering/IT/IS with 5 years of relevant perimeter security experience.
• Master’s degree in CS/Engineering/IT/IS with 3 years of relevant perimeter security experience.
• Experience designing perimeter security defenses for enterprise networks.

Responsibilities

• Makes information security risk determinations based on intelligence analysis.
• Develops plans to safeguard data and meet emergency processing needs.
• Monitors virus reports and updates virus protection.
• Encrypts data transmissions and erects firewalls to protect confidential information.
• Performs risk assessments and tests data processing systems.
• Modifies security files to update software and access status.

Skills

Secure routing protocols (RIPv2/OSPF)

Encryption protocols (IPSec/SSL/TLS)

Firewall & access controls

Manual & automated penetration testing

Nessus/Qualys/Burp Suite

Security monitoring (Splunk/QRadar)

Incident handling & response

Education

Bachelor’s degree in CS/Engineering/IT/IS

Master’s degree in CS/Engineering/IT/IS

Tools

Nmap

DirBuster

Metasploit

Nessus

Qualys

Burp Suite

Splunk

QRadar

Sevone

Wireshark

CrowdStrike

SentinelOne

ServiceNow

Cisco ASA

Juniper SRX

Check Point Firewalls

Forcepoint Proxy Servers

Job description

Principal Cybersecurity Analyst

Note: Fidelity will not provide immigration sponsorship for this position.

Performs functions related to Network and Perimeter specialized Security Engineers including Email Security, DNS, Distributed Denial of Service (DDoS), IDS/IPS and cloud security. Understands cyber threats, malicious cyber threat actor motivations, and capabilities relevant to regions of interest. Builds Email Security, Email and Web Advanced Threat Protection, DNS, DDoS, IDS/IPS and cloud security. Stops external attacks to firm systems using endpoint controls including firewall, antivirus, and host-based intrusion systems. Manages Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), Cloud Security and Email Security operational functions.

Primary Responsibilities:

• Makes information security risk determinations based on intelligence analysis.
• Develops plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Monitors current reports of computer viruses to determine when to update virus protection systems.
• Encrypts data transmissions and erects firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Performs risk assessments and executes tests of data processing systems to ensure functions of data processing activities and security measures.
• Modifies computer security files to incorporate new software, correct errors, or change individual access status.

Education and Experience:

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and five (5) years of experience as a Principal Cybersecurity Analyst (or closely related occupation) designing and implementing perimeter security defense solutions to protect enterprise networks from external threats, unauthorized access, and DDoS attacks, in on premises and Cloud environments.

Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Cybersecurity Analyst (or closely related occupation) designing and implementing perimeter security defense solutions to protect enterprise networks from external threats, unauthorized access, and DDoS attacks, in on premises and Cloud environments.

Skills and Knowledge:

Candidate must also possess:

• Demonstrated Expertise (DE) designing enterprise networks requiring security using secure routing protocols (RIPv2 and OSPF), encryption protocols (IPSec and SSL or TLS), and robust firewalls and access control implementation.
• DE performing manual and penetration testing, using Nmap, Dirbuster, and Metasploit to secure enterprise network from unauthorized access; and performing automated penetration testing using Nessus, Qualys, and Burpsuite to identify vulnerabilities, analyze traffic, and validate security controls.
• DE maintaining security systems (Cisco ASA, Juniper SRX, or Check Point Firewalls), intrusion detection and prevention systems, force point proxy servers, and log management tools (Splunk, QRadar, and Sevone) to monitor and troubleshoot network traffic.
• DE engaging in incident handling -- threat discovery, triage, containment, recovery, and remediation plan coordination -- using Splunk, Wireshark, CrowdStrike, SentinelOne, and ServiceNow to ensure rapid response and resolution.

Fidelity’s Onsite Working Model: Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications

Category

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Apply

All fields are required. Candidates should limit the number of roles they apply to at any given time.

Benefits that balance life and work

From our fully paid parent leave to our on-site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.

Benefits

Company overview

Company overview

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience.

Reasonable accommodations

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to [e-mail], or by calling 800-835-5099, prompt 2, option 3.

Equal opportunity employer

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Applicant screening

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

AI Guidelines

Learn about our guidelines for use of AI when applying for a Fidelity job