Senior Cybersecurity Analyst

Fidelity Investments Inc.; Texas; On-site; USD 110,000 - 140,000; Full time

Job summary

Fidelity Investments Inc. is seeking a Senior Cybersecurity Analyst to design and implement security controls across platforms, conduct vulnerability assessments, and support incident response.

You will collaborate with technology and business teams to embed security requirements throughout the system lifecycle and maintain comprehensive cybersecurity documentation. Qualifications include a degree in a related field and 3 years of hands-on experience, or a Master’s with 1 year of experience.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or closely related field and three years of experience in design/implementation of enterprise security controls.
• Alternatively, Master’s degree and one year of relevant experience in enterprise security controls across cloud and edge environments.

Responsibilities

• Develops, designs, and implements security controls and configurations for multiple platforms and projects.
• Conducts security monitoring, vulnerability assessments, and testing to identify and remediate issues.
• Supports incident response and continuous improvement through analysis of security events and reports.
• Collaborates with technology and business teams to integrate security requirements throughout the system lifecycle.
• Maintains cybersecurity documentation, assessments, procedures, and validation artifacts.

Skills

Nmap

Burp Suite

Nessus

Qualys

IAM

Vulnerability mgmt

Data protection

Web app security

Python

Bash

PowerShell

SQL

WAF

Bot mitigation

API security

Incident response

Log analysis

Change management

Education

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or closely related field

Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or closely related field

Job description

Senior Cybersecurity Analyst### Senior Cybersecurity AnalystApply: Westlake, TX: Full time: Posted Today: End Date: December 15, 2026 (30+ days left to apply): 2137711**Fidelity will not provide immigration sponsorship for this position.**## ## Job Description:**Position Description**:Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement activities. Supports the integration of security requirements into projects by collaborating with technology and business teams throughout the system lifecycle. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts. Supports compliance with organizational policies and applicable regulatory or standards‐based security requirements.**Primary Responsibilities:*** Develops original and creative security solutions to address ongoing cybersecurity efforts.* Designs security controls, configurations, or subsystems for major projects and across multiple platforms.* Implements and supports cybersecurity solutions for multiple projects supporting several divisional initiatives.* Supports and performs all phases of security testing, including vulnerability assessments, security validation, and remediation activities, leading to implementation.* Assists in the planning and execution of security validation and acceptance testing activities.* Develops comprehensive cybersecurity documentation for multiple systems supporting several corporate initiatives.* Responsible for post-implementation security testing and analysis to identify and resolve issues.* Establishes security plans and task-level work plans for projects of moderate scope.* Works on complex assignments and often across multiple phases of a project.* Performs independent and complex technical and functional security analysis for multiple projects supporting several initiatives.**Education and Experience**:Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‐scale perimeter and application security controls for internet‐facing applications across cloud and edge computing environments.Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‐scale perimeter and application security controls for internet‐facing applications across cloud and edge computing environments.**Skills and Knowledge**:Candidate must also possess:· Demonstrated Expertise validating the effectiveness of perimeter and application security controls through targeted manual testing and automated vulnerability assessments, using Nmap, Burp Suite, Nessus, and Qualys to identify external attack surfaces, analyze traffic patterns, detect misconfigurations, and confirm control efficacy. · Demonstrated Expertise identifying security risks and control gaps across access control frameworks, identity and access management (IAM), vulnerability management, data protection mechanisms, and web application security, ensuring alignment with internal security policies, technical standards, and regulatory compliance requirements.· Demonstrated Expertise developing and using scripts in Python, Bash, PowerShell, or SQL to automate security workflows, enhance monitoring and analysis processes, support vulnerability remediation efforts, and improve operational efficiency within security platforms and tooling; and performing the security control using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response.· Demonstrated Expertise supporting change management and incident response activities, including investigating security events and troubleshooting complex issues through log analysis and telemetry from security, application, and infrastructure systems, to determine root cause and resolution within established procedures.#PE1M2#LI-DNIFidelity’s Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.## ## Certifications:## ## Category:## Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.