Senior Cyber Remediation Analyst

The Role

We are seeking a dynamic and driven individual to join our fast-paced security team, engaged in enterprise-wide Vulnerability Remediation efforts! The ideal candidate will thrive in an environment that addresses an ever-evolving threat landscape and collaborates with various security teams. This position requires collaboration skills to drive remediation activities across the enterprise, organizational skills, proven analytic skills, attention to detail and vulnerability specific technical expertise.

As a Senior Cyber Remediation Analyst, you will be part of a team dedicated to remediation programs, including Application, Infrastructure, and Vendor security. You will also contribute to rebuilding foundational elements that support other cyber policy and operational programs. Our goal is to ensure effective operational, monitoring, and oversight processes to minimize cyber risk and address any identified gaps!

• Knowledge and understanding of vulnerability management and remediation.
• Working knowledge of Cloud concepts - (AWS, Azure, etc.)
• Working knowledge of Windows, Linux, and other popular Operating Systems.
• Working knowledge in related vulnerability analysis and risk assessment tools.
• Strong communication skills to relay results of analysis.
• Ability to build strong relationships across various functions to be able to preemptively identify and communicate risks.
• Ability to work independently and solve challenging problems while collaborating with stakeholders.
• Collaborating with the internal ISO Team's to ensure proper escalation and remediation according to commitments.
• Update and maintain vulnerability management Process and Procedures.
• Quick learner with the ability to adapt to new tools and technology.
• Detail oriented, organized, methodical, follow up skills with an analytical thought process.
• Hands on experience with at least one of the following scanning tools - (Qualys, Defender, WIZ)

The Cyber Remediation team is responsible for driving the remediation of foundational or systemic cybersecurity policies, programs, or risk standards and monitoring for drift over time. We are part of the Cyber Operations & Analytics unit within Enterprise Cybersecurity and collaborate with each Product Area to improve the overall risk posture across the cyber environment.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.