Senior Cybersecurity Analyst

Fidelity; Westlake (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Onsite Working Model

Job summary

Fidelity is seeking a Senior Cybersecurity Analyst to design and implement security controls across platforms, conduct monitoring and vulnerability testing, and support remediation. The role emphasizes collaboration with technology and business teams to ensure secure system lifecycles.

You will develop cybersecurity documentation, validate control effectiveness, and ensure compliance with policies and standards. Onsite work is transitioning, with some roles requiring 100% onsite presence.

Qualifications

• Bachelor’s degree in a related field and three (3) years of experience as a Senior Cybersecurity Analyst in enterprise‑scale security.
• Or Master’s degree in a related field and one (1) year of experience in similar roles.
• Experience designing and operating perimeter and application security controls for internet‑facing apps.

Responsibilities

• Develops original and creative security solutions for ongoing cybersecurity efforts.
• Designs security controls and configurations for major projects across platforms.
• Implements and supports cybersecurity solutions for multiple projects.
• Supports security testing, vulnerability assessments, and remediation activities.
• Assists in planning and executing security validation and acceptance testing.

Skills

Security controls design

Security testing

Incident response

Documentation

Regulatory compliance

Education

Bachelor’s degree in Computer Science, Engineering, IT, IS, Cybersecurity, or related field

Master’s degree in Computer Science, Engineering, IT, IS, Cybersecurity, or related field

Tools

Nmap

Burp Suite

Nessus

Qualys

Python

Bash

PowerShell

SQL

Job description

Fidelity will not provide immigration sponsorship for this position.

Job Description:

Position Description:

Designs and implements security controls and configurations to protect systems, applications, and data across multiple platforms. Conducts security monitoring, vulnerability assessments, and security testing to identify, analyze, and support remediation of security issues. Analyzes security events, findings, and reports to support incident response and continuous improvement activities. Supports the integration of security requirements into projects by collaborating with technology and business teams throughout the system lifecycle. Develops and maintains cybersecurity documentation, including security assessments, procedures, and validation artifacts. Supports compliance with organizational policies and applicable regulatory or standards‑based security requirements.

Primary Responsibilities:

• Develops original and creative security solutions to address ongoing cybersecurity efforts.
• Designs security controls, configurations, or subsystems for major projects and across multiple platforms.
• Implements and supports cybersecurity solutions for multiple projects supporting several divisional initiatives.
• Supports and performs all phases of security testing, including vulnerability assessments, security validation, and remediation activities, leading to implementation.
• Assists in the planning and execution of security validation and acceptance testing activities.
• Develops comprehensive cybersecurity documentation for multiple systems supporting several corporate initiatives.
• Responsible for post-implementation security testing and analysis to identify and resolve issues.
• Establishes security plans and task-level work plans for projects of moderate scope.
• Works on complex assignments and often across multiple phases of a project.
• Performs independent and complex technical and functional security analysis for multiple projects supporting several initiatives.

Education and Experience:

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments.

Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) designing, implementing, and operating enterprise‑scale perimeter and application security controls for internet‑facing applications across cloud and edge computing environments.

Skills and Knowledge:

Candidate must also possess:

• · Demonstrated Expertise validating the effectiveness of perimeter and application security controls through targeted manual testing and automated vulnerability assessments, using Nmap, Burp Suite, Nessus, and Qualys to identify external attack surfaces, analyze traffic patterns, detect misconfigurations, and confirm control efficacy.
• · Demonstrated Expertise identifying security risks and control gaps across access control frameworks, identity and access management (IAM), vulnerability management, data protection mechanisms, and web application security, ensuring alignment with internal security policies, technical standards, and regulatory compliance requirements.
• · Demonstrated Expertise developing and using scripts in Python, Bash, PowerShell, or SQL to automate security workflows, enhance monitoring and analysis processes, support vulnerability remediation efforts, and improve operational efficiency within security platforms and tooling; and performing the security control using Web Application Firewalls (WAF), bot mitigation, API security, and external threat incident response.
• · Demonstrated Expertise supporting change management and incident response activities, including investigating security events and troubleshooting complex issues through log analysis and telemetry from security, application, and infrastructure systems, to determine root cause and resolution within established procedures.

#PE1M2

#LI-DNI

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.