Senior Cybersecurity Analyst

Fidelity; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Fidelity is seeking a Senior Cybersecurity Analyst to design and implement security controls for enterprise systems across cloud and edge environments. You will conduct vulnerability assessments, security testing, and incident response activities while aligning with corporate policies and regulatory standards.

The role involves developing cybersecurity documentation, supporting project teams, and participating in security validation across multiple initiatives.

Qualifications

• Bachelor's or Master's in a related field with applicable security experience.
• 3+ years for Bachelor's track or 1+ year for Master's track in security designing and operating enterprise-scale controls.

Responsibilities

• Develops and implements security controls and configurations across platforms.
• Performs vulnerability assessments and security testing, supporting remediation.
• Analyzes security events and supports incident response and continuous improvement.
• Documents security assessments and validation artifacts.
• Supports compliance with policies and regulatory requirements.
• Leads security validation and testing activities, including planning and execution.
• Creates security plans and work plans for projects of moderate scope.
• Works across multiple phases and complex assignments.

Skills

Security testing

Vulnerability assessments

Incident response

Change management

Access control frameworks

IAM

Web application security

Education

Bachelor's degree in CS/ENG/IT/Info Sec

Master's degree in CS/ENG/IT/Info Sec

Tools

Nmap

Burp Suite

Nessus

Qualys

Python

Bash

PowerShell

SQL

Job description

Job Description

Fidelity will not provide immigration sponsorship for this position.

Position Description

Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement activities. Supports the integration of security requirements into projects by collaborating with technology and business teams throughout the system lifecycle. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts. Supports compliance with organizational policies and applicable regulatory or standards‑based security requirements.

Primary Responsibilities

• Develops original and creative security solutions to address ongoing cybersecurity efforts.
• Designs security controls, configurations, or subsystems for major projects and across multiple platforms.
• Implements and supports cybersecurity solutions for multiple projects supporting several divisional initiatives.
• Supports and performs all phases of security testing, including vulnerability assessments, security validation, and remediation activities, leading to implementation.
• Assists in the planning and execution of security validation and acceptance testing activities.
• Develops comprehensive cybersecurity documentation for multiple systems supporting several corporate initiatives.
• Responsible for post-implementation security testing and analysis to identify and resolve issues.
• Establishes security plans and task‑level work plans for projects of moderate scope.
• Works on complex assignments and often across multiple phases of a project.
• Performs independent and complex technical and functional security analysis for multiple projects supporting several initiatives.

Education and Experience

• Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments.
• Or, alternatively, Master's degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments.

Skills and Knowledge

• Demonstrated Expertise validating the effectiveness of perimeter and application security controls through targeted manual testing and automated vulnerability assessments, using Nmap, Burp Suite, Nessus, and Qualys to identify external attack surfaces, analyze traffic patterns, detect misconfigurations, and confirm control efficacy.
• Demonstrated Expertise identifying security risks and control gaps across access control frameworks, identity and access management (IAM), vulnerability management, data protection mechanisms, and web application security, ensuring alignment with internal security policies, technical standards, and regulatory compliance requirements.
• Demonstrated Expertise developing and using scripts in Python, Bash, PowerShell, or SQL to automate security workflows, enhance monitoring and analysis processes, support vulnerability remediation efforts, and improve operational efficiency within security platforms and tooling; and performing the security control using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response.
• Demonstrated Expertise supporting change management and incident response activities, including investigating security events and troubleshooting complex issues through log analysis and telemetry from security, application, and infrastructure systems, to determine root cause and resolution within established procedures.

Fidelity's Onsite Working Model

Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications

Category

Information Technology Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940,