Senior Cyber Remediation Analyst

Fidelity Investments Inc.; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Fidelity Investments Inc. is seeking a Senior Cyber Remediation Analyst to join our security team and lead enterprise-wide remediation across applications, infrastructure, and vendors. You will drive remediation programs and help rebuild foundational cyber elements to support policy and operations.

The role requires collaboration with multiple security teams, strong analytics, and attention to detail, with onsite work as the model for many roles.

Qualifications

• Knowledge of vulnerability management and remediation.
• Experience with cloud concepts (AWS, Azure).
• Experience with Windows and Linux operating systems.
• Experience with vulnerability analysis and risk tools.
• Strong communication to relay analysis results.
• Ability to build relationships across functions to identify risks.
• Ability to work independently and solve problems with stakeholders.
• Collaborate with ISO teams for escalation and remediation.
• Maintain vulnerability management processes and procedures.
• Quick learner with adaptability to new tools.
• Detail oriented, organized with analytical thinking.
• Hands-on with scanning tools (Qualys/Defender/WIZ).

Skills

Vulnerability management

Cloud concepts

Operating systems

Vulnerability tools

Communication

Cross-functional relationships

Independent work

ISO collaboration

Process documentation

Learning agility

Attention to detail

Scanning tools experience

Tools

Qualys

Defender

WIZ

Job description

Job Description

Note: Fidelity will not provide immigration sponsorship for this position

The Role

We are seeking a dynamic and driven individual to join our fast-paced security team, engaged in enterprise-wide Vulnerability Remediation efforts! The ideal candidate will thrive in an environment that addresses an ever-evolving threat landscape and collaborates with various security teams. This position requires collaboration skills to drive remediation activities across the enterprise, organizational skills, proven analytic skills, attention to detail and vulnerability specific technical expertise.

As a Senior Cyber Remediation Analyst, you will be part of a team dedicated to remediation programs, including Application, Infrastructure, and Vendor security. You will also contribute to rebuilding foundational elements that support other cyber policy and operational programs. Our goal is to ensure effective operational, monitoring, and oversight processes to minimize cyber risk and address any identified gaps!

The Expertise You Have And The Skills You Bring

• Knowledge and understanding of vulnerability management and remediation.
• Working knowledge of Cloud concepts - (AWS, Azure, etc.)
• Working knowledge of Windows, Linux, and other popular Operating Systems.
• Working knowledge in related vulnerability analysis and risk assessment tools.
• Strong communication skills to relay results of analysis.
• Ability to build strong relationships across various functions to be able to preemptively identify and communicate risks.
• Ability to work independently and solve challenging problems while collaborating with stakeholders.
• Collaborating with the internal ISO Team's to ensure proper escalation and remediation according to commitments.
• Update and maintain vulnerability management Process and Procedures.
• Quick learner with the ability to adapt to new tools and technology.
• Detail oriented, organized, methodical, follow up skills with an analytical thought process.
• Hands on experience with at least one of the following scanning tools - (Qualys, Defender, WIZ)

The Team

The Cyber Remediation team is responsible for driving the remediation of foundational or systemic cybersecurity policies, programs, or risk standards and monitoring for drift over time. We are part of the Cyber Operations & Analytics unit within Enterprise Cybersecurity and collaborate with each Product Area to improve the overall risk posture across the cyber environment.

Fidelity’s Onsite Working Model

Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.