Cybersecurity Analyst Sr

Job Description
Job Posting:
Cybersecurity Analyst Sr:
Contact ending January 7, 2027

You will be working on a remote schedule as part of Fidelity’s dynamic working arrangement.

Current work authorization for Canada is required for all openings.

The work location for this role is 483 Bay Street in Toronto until approximately late 2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services – and we’re constantly seeking to find new and better ways to help our clients.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best – both personally and professionally.

The Cybersecurity Analyst Sr supports the risk mitigation efforts of Fidelity’s Cyber Defense Operations (CDO) under the Information Security and Technology Risk group in order to safeguard and protect our information assets and critical data from current and emerging cyber threats.

The Cybersecurity Analyst Sr will apply their cybersecurity skills and knowledge in day‑to‑day management of cyber activities including, but not limited to, analyzing security logs and systems data to identify anomalous or irregular events; executing cyber management processes to respond to, investigate and report on identified security incidents; maintaining various security tools and technologies such as advanced malware detection, DDoS, IDS/IPS, DLP, anti‑spam and other cyber‑threat‑intelligence and vulnerability‑management capabilities.

The ideal candidate has experience not only using a wide range of technologies to respond to security events but also supporting ongoing maintenance of the tools.

• Ensure computing platform compliance with cybersecurity policies and directives. Use provided tools to perform continual monitoring and analysis of system activity to identify malicious activity and configure mitigations. Coordinate with other departments to manage and administer the updating of rules and signatures across the information security stack (e.g., intrusion detection/protection systems, anti‑virus, and content blacklists). Identify and recommend actions to address vulnerabilities in the computing environment or inconsistencies in existing security processes.
• Conduct research, trend analysis, correlation and reporting across a wide variety of internal and external source data sets (e.g., network, OS, DB and application logs and alerts). Provide timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities, and distinguish these incidents and events from benign activities. Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
  
  Analyze identified malicious activity in the computing environment to determine weaknesses exploited, exploitation methods, and effects on system and information. Participate or lead cyber incident detection, investigation, and response.
• Participate in cybersecurity awareness and training exercises. Advise on cybersecurity policies, industry standards, best practices, and strategies.
• Provide summary reports of network events and activity relevant to CDO including trend analysis. Monitor external data sources to maintain currency of threat conditions and determine and report on security issues that may have an impact on Fidelity. Support CDO reporting activities.
• Participate in on‑call and shift rotation when needed.

• Excellent knowledge of cybersecurity detection and response methodologies using a wide range of technologies, standards and best practices.
• Strong understanding of the incident response lifecycle.
• Strong…