Senior Cyber Remediation Analyst

Habitat For Humanity Of Durham; Durham (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Fidelity is seeking a Senior Cyber Remediation Analyst to join our fast-paced security team. The role focuses on enterprise-wide remediation across applications, infrastructure, and vendors, ensuring effective processes and risk reduction.

You will collaborate with multiple security teams and internal ISO to escalate and remediate commitments. The candidate will work in a high-visibility, detail-oriented environment, leveraging vulnerability management expertise and tools such as Qualys,

Qualifications

• Knowledge of vulnerability management and remediation.
• Working knowledge of Cloud concepts (AWS, Azure, etc.).
• Working knowledge of Windows, Linux, and other popular operating systems.
• Experience with vulnerability analysis and risk assessment tools.
• Strong communication skills to relay results of analysis.
• Ability to build relationships across functions to identify and communicate risks.
• Ability to work independently and solve challenging problems with stakeholders.
• Collaborating with ISO team for escalation and remediation commitments.
• Update and maintain vulnerability management processes and procedures.
• Quick learner and adaptable to new tools and technology.

Responsibilities

• Drive enterprise-wide vulnerability remediation initiatives.
• Collaborate with security teams to address identified gaps.
• Contribute to remediation programs across applications, infrastructure, and vendors.
• Maintain foundational elements supporting cyber policy and operational programs.

Skills

Vulnerability mgmt

Cloud concepts

Windows/Linux

Vulnerability tools

Communication

Stakeholder mgmt

Problem solving

ISO coordination

Docs & processes

Scanning tools

Tools

Qualys

Defender

WIZ

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

The Role

We are seeking a dynamic and driven individual to join our fast-paced security team, engaged in enterprise-wide Vulnerability Remediation efforts! The ideal candidate will thrive in an environment that addresses an ever-evolving threat landscape and collaborates with various security teams. This position requires collaboration skills to drive remediation activities across the enterprise, organizational skills, proven analytic skills, attention to detail and vulnerability specific technical expertise.

As a Senior Cyber Remediation Analyst, you will be part of a team dedicated to remediation programs, including Application, Infrastructure, and Vendor security. You will also contribute to rebuilding foundational elements that support other cyber policy and operational programs. Our goal is to ensure effective operational, monitoring, and oversight processes to minimize cybearisk and address any identified gaps!

The Expertise You Have and The Skills You Bring

• Knowledge and understanding of vulnerability management and remediation.

• Working knowledge of Cloud concepts - (AWS, Azure, etc.)

• Working knowledge of Windows, Linux, and other popular Operating Systems.

• Working knowledge in related vulnerability analysis and risk assessment tools.

• Strong communication skills to relay results of analysis.

• Ability to build strong relationships across various functions to be able to preemptively identify and communicate risks.

• Ability to work independently and solve challenging problems while collaborating with stakeholders.

• Collaborating with the internal ISO Team's to ensure proper escalation and remediation according to commitments.

• Update and maintain vulnerability management Process and Procedures.

• Quick learner with the ability to adapt to new tools and technology.

• Detail oriented, organized, methodical, follow up skills with an analytical thought process.

• Hands on experience with at least one of the following scanning tools - (Qualys, Defender, WIZ)

The Team

The Cyber Remediation team is responsible for driving the remediation of foundational or systemic cybersecurity policies, programs, or risk standards and monitoring for drift over time. We are part of the Cyber Operations & Analytics unit within Enterprise Cybersecurity and collaborate with each Product Area to improve the overall risk posture across the cyber environment.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.