Senior Security Automation Engineer — Security Operations Center

Fidelity Investments Inc.; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Fidelity Investments Inc. in the United States is seeking a Senior Security Automation Engineer for the Security Operations Center.

You will design and build automation platforms, enhance detection and response workflows, and create scalable Python-based services that empower analysts to investigate threats more effectively. You will work at the intersection of software engineering and cybersecurity, leading technical improvements, supporting threat hunts and incident response, and shaping the

Qualifications

• 3+ years in information security incident response, detection engineering, or security automation.
• Strong Python development for automation, tooling, integrations, or backend services.
• Experience with SIEM, SOAR, EDR technologies.
• Hands-on with containers and cloud (Docker, Kubernetes, Azure, AWS).
• Ability to translate security challenges into scalable solutions and explain them to teams.
• Desirable: AI/LLM in security workflows; relevant certifications.

Responsibilities

• Design and develop security automation platforms and workflows.
• Improve detection and response capabilities to support analysts.
• Lead technical improvements and roadmap for security automation.
• Support threat hunting and incident response activities.
• Collaborate with engineers, security analysts, and leadership.

Skills

Python development

Security automation

Incident response

Threat hunting

Communication

Education

Bachelor's degree in Computer Science or related field

Security certifications (GCIH, GCFA, OSCP, CISSP)

Tools

Docker

Kubernetes

Azure

AWS

SIEM

SOAR

Job description

Fidelity will not provide immigration sponsorship for this position.

Job Description:

The Role

As a Senior Security Automation Engineer in Fidelity’s Security Operations Center, we are building and advancing automation capabilities that strengthen global security operations and help protect Fidelity, its affiliates, partners, and customers. This role is focused on designing and developing security automation platforms, improving detection and response workflows, and creating scalable solutions that enable security analysts to investigate and respond to threats more effectively. Working at the intersection of software engineering and cybersecurity, this engineer is developing Python-based services and integrations, enhancing security monitoring and response capabilities, and identifying opportunities to apply artificial intelligence to security operations. The role is also leading technical improvements, supporting threat hunting and incident response, and shaping the strategy and roadmap for security automation.

The Expertise and Skills You Bring

• 3+ years of experience in information security incident response, detection engineering, security automation, or a closely related field.
• Strong Python development experience building automation, tooling, integrations, or backend services.
• Experience with enterprise security technologies for security information and event management, security orchestration and automated response, and endpoint detection and response.
• Hands-on experience with containers and cloud environments, including technologies such as Docker, Kubernetes, Microsoft Azure, and Amazon Web Services.
• Understanding of network protocols, host-based forensic analysis, common attack techniques, and security incident investigation.
• Ability to translate security challenges into scalable technical solutions and communicate technical concepts clearly to security analysts, engineers, and leaders.
• Experience with production Kubernetes, infrastructure as code, front-end development, systems architecture, or applying artificial intelligence and large language models to security workflows is preferred.
• Security certifications such as GCIH, GCFA, OSCP, CISSP, or comparable credentials are a plus.

The Team

Fidelity’s Security Operations Center helps protect the company by detecting, investigating, and responding to cybersecurity threats while continuously improving the technology and processes that support those efforts. We have a relentless commitment to protecting our customers and business, and our security automation capabilities help analysts work more efficiently, improve detection coverage, and respond to potential threats faster. Our team partners across cybersecurity, technology, engineering, and business groups, while also working with external technology and security providers to strengthen Fidelity’s defenses. Our greatest asset is our people, and we value learning, knowledge sharing, thoughtful experimentation, and using data and technology to continuously improve how we protect Fidelity.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.