Senior Cyber Remediation Analyst

Fidelity Investments Inc.; North Carolina; On-site; USD 100,000 - 150,000; Full time

Job summary

Fidelity Investments is seeking a Senior Cyber Remediation Analyst to join the enterprise Cyber Operations & Analytics group. The role focuses on remediation across applications, infrastructure, and vendor security in a fast-paced environment.

The team drives foundational security programs, monitors for drift, and collaborates with product areas to improve risk posture. 100% onsite rollout is underway, with some regions requiring onsite presence.

Qualifications

• Knowledge of vulnerability management and remediation.
• Working knowledge of cloud concepts (AWS, Azure, etc.).
• Experience with Windows and Linux operating systems.
• Experience with vulnerability analysis and risk assessment tools.
• Strong communication skills to relay analysis results.
• Ability to build relationships across functions to identify risks.
• Ability to work independently and solve problems while collaborating with stakeholders.
• Collaboration with ISO Team to ensure proper escalation and remediation.
• Update and maintain vulnerability management processes and procedures.
• Quick learner with ability to adapt to new tools/tech.
• Detail oriented, organized, and analytical.

Skills

Vulnerability management

Cloud concepts

Windows & Linux

Vulnerability tools

Communication skills

Cross-functional collaboration

Independent problem solving

ISO coordination

Process documentation

Fast learner

Attention to detail

Qualys

Defender

WIZ

Tools

Qualys

Defender

WIZ

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

The Role

We are seeking a dynamic and driven individual to join our fast-paced security team, engaged in enterprise-wide Vulnerability Remediation efforts! The ideal candidate will thrive in an environment that addresses an ever-evolving threat landscape and collaborates with various security teams. This position requires collaboration skills to drive remediation activities across the enterprise, organizational skills, proven analytic skills, attention to detail and vulnerability specific technical expertise.

As a Senior Cyber Remediation Analyst, you will be part of a team dedicated to remediation programs, including Application, Infrastructure, and Vendor security. You will also contribute to rebuilding foundational elements that support other cyber policy and operational programs. Our goal is to ensure effective operational, monitoring, and oversight processes to minimize cyber risk and address any identified gaps!

The Expertise You Have and The Skills You Bring

• Knowledge and understanding of vulnerability management and remediation.

• Working knowledge of Cloud concepts - (AWS, Azure, etc.)

• Working knowledge of Windows, Linux, and other popular Operating Systems.

• Working knowledge in related vulnerability analysis and risk assessment tools.

• Strong communication skills to relay results of analysis.

• Ability to build strong relationships across various functions to be able to preemptively identify and communicate risks.

• Ability to work independently and solve challenging problems while collaborating with stakeholders.

• Collaborating with the internal ISO Team's to ensure proper escalation and remediation according to commitments.

• Update and maintain vulnerability management Process and Procedures.

• Quick learner with the ability to adapt to new tools and technology.

• Detail oriented, organized, methodical, follow up skills with an analytical thought process.

• Hands on experience with at least one of the following scanning tools - (Qualys, Defender, WIZ)

The Team

The Cyber Remediation team is responsible for driving the remediation of foundational or systemic cybersecurity policies, programs, or risk standards and monitoring for drift over time. We are part of the Cyber Operations & Analytics unit within Enterprise Cybersecurity and collaborate with each Product Area to improve the overall risk posture across the cyber environment.

Fidelity's Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.