Job Description:
Position Description:
Note: Fidelity will not provide immigration sponsorship for this position.
Identifies, analyzes, and mitigates insider threats and data risks by leveraging multiple data sources and advanced analytical techniques. Assessing the effectiveness of existing threat detection and data protection controls through measurable, data-driven metrics. Builds email security, email and Web advance threat protection, Domain Name System (DNS), Distributed Denial of Service (DDoS), Intrusion Detection Systems (IDS), Intrusion Prevention (IPS), and Cloud security. Recognizes and identifies attacks that may occur in each layer of the Open Systems Interconnection (OSI). Exchanges online protection using Microsoft O365 Suite. Understands malicious URLS using Symantec SiteReview. Prevents external attacks to systems using endpoint controls -- firewall, antivirus, and host-based intrusion systems.
Primary Responsibilities:
Monitors and investigates user behavior for indicators of potential insider threats, using data-driven behavioral analytics.
Creates and maintains dashboards, reports, and executive summaries that communicate emerging risks, detection outcomes, and trends to technical and business audiences.
Recommends improvements to detection rules, monitoring coverage, and escalation procedures, using findings from effectiveness reviews and incident post-mortems.
Develops metrics to assess the accuracy and coverage of insider threat detections and controls.
Tracks false positive and negative rates, detection latency, and incident response outcomes to improve detection logic.
Partners with risk, compliance, and Information Security Officers (ISOs) to share finding, generate awareness, and influence how business groups manage insider risks.
Education and Experience:
Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, Data Science, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Senior Cybersecurity Analyst (or closely related occupation) performing in-depth analysis to identify insider risk and data-loss-prevention (DLP) events across exfiltration channels, endpoints, access logs, and database and server audit logs.
Or, alternatively, Master's degree in Computer Science, Engineering, Information Technology, Information Systems, Data Science, or a closely related field (or foreign education equivalent) and one (1) year of experience as a Senior Cybersecurity Analyst (or closely related occupation) performing in-depth analysis to identify insider risk and data-loss-prevention (DLP) events across exfiltration channels, endpoints, access logs, and database and server audit logs.
Skills and Knowledge:
Candidate must also possess:
Demonstrated Expertise (“DE”) designing and implementing data integration pipelines to consolidate structured and unstructured datasets into centralized data warehouses using AWS Glue, Athena, Oracle, MySQL, and Snowflake; developing normalized and analytics ready data models using SQL, Python (Pandas, PySpark), Tableau, and Snowflake scripting; and evaluating and optimizing analytical systems by analyzing KPIs and processing latency to improve data quality, reliability, and reporting performance with Tableau and Power BI.
DE developing data models and performance dashboards using Tableau, Power BI, and Athena, and Snowflake; defining analytical metrics and trends; optimizing visualization performance on large datasets exceeding million rows; and preparing root-cause analysis reports and analytical summaries for senior stakeholders using Tableau, Power BI, and Python-based reporting.
DE developing Python-based automation scripts to perform data lookups, metadata joins, transformations, and enrichment of datasets in Athena, Oracle, MySQL, and Snowflake databases, implementing data categorization and analytical classification logic using Python and integrating analytical outputs into operational dashboards and reports for leadership review using Tableau/ Power BI.
DE designing data architectures and building multi-layered analytical models that combine transactional, behavioral, and operational datasets to establish analytical baselines and detect trends using S3, Athena, Snowflake, and Tableau/Power BI; developing Extract, Transform, Load (ETL) workflows and data-quality automation using AWS S3, Snowflake Tasks, CTAS Streams, and stored procedures.
#PE1M2
#LI-DNI
Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Certifications:
Category:
Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
Apply
All fields are required. Candidates should limit the number of roles they apply to at any given time.
Benefits that balance life and work
From our fully paid parent leave to our on-site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.
Company overview
Company overview
At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience.
Reasonable accommodations
Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.
Equal opportunity employer
Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
Applicant screening
At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.