Sr Cyber Security Analyst

Federal Express Corporation; Memphis (TN); Hybrid; USD 79,000 - 174,000; Full time

Job summary

Federal Express Corporation is seeking a Senior Cyber Security Analyst to advance our Product Security program. You will collaborate with a cross-functional team to shape security practices, mentor teammates, and secure the software development lifecycle within an agile environment.

The role emphasizes hands-on security guidance for developers, threat modeling, and secure design reviews, with focus on cloud security and containerized architectures in a hybrid work setting across Memphis, Plano,

Qualifications

• Bachelor's degree in computer science, information systems, or related degree, and/or equivalent formal training or work experience.
• Four (4) years of experience in IT information security.
• General knowledge of hardware, software, and network.

Responsibilities

• Define and mature the Product Security program's long-term strategy, processes, and roadmap.
• Lead sprint security discussions and backlog grooming.
• Lead security design reviews and secure code reviews for new features and architectures.
• Facilitate and lead threat modeling sessions, producing actionable threat models and risk documentation.
• Own the evaluation, configuration, and tuning of security tooling in the CI/CD pipeline (SAST, DAST, SCA).
• Own end-to-end vulnerability identification, triage, prioritization, and remediation tracking.
• Apply cloud security principles to support migration to public cloud like GCP, including IAM and workload protection guidance.
• Provide mentorship and technical guidance to team members.

Skills

Application security

Programming languages

OWASP Top 10

CI/CD security tooling

Cloud security (GCP)

Security certifications

Mentorship

Education

Bachelor's degree in CS/IS

Tools

SAST

DAST

SCA

Artifact Registry

Binary Authorization

Kubernetes (GKE)

Job description

This position will be hybrid in: Memphis, TN / Plano, TX / Pittsburgh, PA. Candidates must live within a commutable distance from Memphis, Plano, or Pittsburgh to be eligible for this role. Employees will be required to work at a FedEx office location up to several times per week.

Sr Cyber Security Analyst

Job Summary

As a Senior Cyber Security Analyst, you will be a key technical contributor on a growing Product Security team. Working closely with the team manager and engineers, you will help shape security practices and drive the team's program maturity while serving as a hands‑on security practitioner embedded with our agile development teams. You will bring senior‑level technical judgement to secure the software development lifecycle and provide technical guidance and mentorship to teammates who are newer to product security. This role is well‑suited for an experienced engineer who thrives in a dynamic, evolving environment and is energized by contributing to a team that is actively building its foundation.

Key Responsibilities

• Program Development: Collaborate with the manager and team members to define and mature the Product Security program's long-term strategy, processes, and roadmap.
• Embedded Security Guidance: Serve as a senior security resource for agile development teams. Lead sprint security discussions, drive security-focused backlog grooming, and act as a trusted technical advisor to developers.
• Secure Design & Code Review: Independently lead security design reviews and secure code reviews for new features and architectures, identifying and remediating vulnerabilities including OWASP Top 10 and cloud-specific risk patterns.
• Threat Modeling: Facilitate and lead threat modeling sessions, producing actionable threat models, risk documentation, and mitigation plans.
• Security Tooling: Own the evaluation, configuration, and continuous tuning of security tooling in the CI/CD pipeline (SAST, DAST, SCA); drive actionable remediation with engineering teams based on findings.
• Vulnerability Management: Own end-to-end vulnerability identification, triage, prioritization, and remediation tracking for assigned product teams.
• Cloud Security: Apply cloud security principles and best practices to support the organization's ongoing migration to public cloud like GCP, including secure architecture review, IAM, and workload protection guidance.
• Mentorship & Technical Guidance: Provide mentorship and technical guidance to team members, actively helping grow the team's collective capabilities.

Preferred Skills

• 3+ years of hands‑on experience in application security or product security.
• Proficiency in at least one programming language (e.g., Python, Java, Go, C#) with the ability to read and review code for security vulnerabilities.
• Deep familiarity with common vulnerability classes (OWASP Top 10, CWE Top 25) and a demonstrated ability to identify and guide remediation in a codebase.
• Hands‑on experience with security tooling in a CI/CD pipeline (e.g., SAST, DAST, SCA).
• Ability to work independently, exercise sound technical judgment, and deliver results in a fast‑paced, evolving environment.
• Experience contributing to or maturing a security program within a large, complex organization.
• Familiarity with GCP‑native security tooling relevant to the software supply chain and container security (e.g., Artifact Registry, Binary Authorization, Cloud Build).
• Experience with cloud‑native architectures and their security considerations, including container security and Kubernetes (e.g., GKE).
• Ability to identify and automate repetitive security tasks to improve team efficiency and scale security operations.
• Relevant security certifications (e.g., CSSLP, GWEB, GWAPT, GPEN, or equivalent).
• Familiarity with security requirements in a regulated or critical infrastructure industry.

Minimum Education

Bachelor's degree in computer science, information systems, or related degree, and/or equivalent formal training or work experience.

Minimum Experience

Four (4) years of experience in IT information security.

Knowledge, Skills, And Abilities

General knowledge of hardware, software, and network.

Pay Ranges: USA: $7,094.23/mo - $15,607.31/mo, CO: $7,094.23/mo - $14,957.01/mo, CA: $7,488.36/mo - $12,533.14/mo, NJ: $7,488.36/mo - $11,981.37/mo, OH & VT: $7,488.36/mo - $12,355.79/mo, MN: $7,488.36/mo - $14,306.70/mo, IL & NV: $7,488.36/mo - $14,957.01/mo, MD, NY & WA: $7,488.36/mo - $15,607.31/mo, MA: $7,882.48/mo - $15,607.31/mo, RI: $8,670.73/mo - $14,306.70/mo, CT: $8,670.73/mo - $14,957.01/mo, DC & HI: $9,064.85/mo - $14,957.01/mo, NYC: $9,064.85/mo - $15,607.31/mo

Pay Transparency

This compensation range is provided as a reasonable estimate of the current starting salary range for this role across all potential locations. If this opportunity includes multiple job levels, the range is a reasonable estimate of the current starting salary for the lowest level to the current starting salary of the highest level. Actual starting pay would be determined by experience relative to the job, market level, pay at the location for this job and other job-related factors. An employee may be eligible for additional pay, premiums, or bonus potential. The Company offers eligible employees health, vision, and dental insurance, retirement plans, and tuition reimbursement

Pay

US pay range: $7,094.23 - $12,533.14 monthly.

Federal Express Corporation is an Equal Opportunity Employer including, Vets/Disability.

Reasonable accommodations are available for qualified individuals with disabilities throughout the application process. Applicants who require reasonable accommodations in the application or hiring process should contact [e-mail].

Applicants Have Rights Under Federal Employment Laws

• Know Your Rights
• Pay Transparency
• Family and Medical Leave Act (FMLA)
• Employee Polygraph Protection Act

E-Verify Program Participant: Federal Express Corporation participates in the Department of Homeland Security U.S. Citizenship and Immigration Services’ E-Verify program (For U.S. applicants and employees only).

• E-Verify Notice (bilingual)
• Right to Work Notice (English) / (Spanish)