Job Description:
The Cloud Security Center of Excellence within Fidelity Enterprise Cyber Security (ECS) is seeking a cloud or data platforms focused security engineer who has broad security domain knowledge including platform access models, logical perimeter, encryption, compliance, threat modeling and risk mitigation. As part of the team, they will deliver bar-raising security consultation and guidance within various cloud service providers (CSPs) and Fidelity hosted platforms. The ideal candidate should have deep understanding of at least one CSP and the unique challenges of securing cloud workloads and managing the security posture of large scale environments in a DevOps operating model.
The Expertise You Have and The Skills You Bring
5+ years of experience in securing infrastructure, platforms, and compliance
Proven experience in consulting or advisory capacity
Understand and promote security best practices at all levels of the organization
Strong understanding of cloud service providers: AWS, Azure, etc.
Securing Data Platforms such as Kafka, Oracle, PostgreSQL, etc.
Multi-tenant platform or service delivery
Continuous Compliance and Auditing methodologies
Scripting automation or developing software: Python, PowerShell, NodeJS, etc.
Implementing infrastructure-as-code concepts and technologies
Exposure to or securing Artificial Intelligence a plus
Curiosity and self-starting nature to learn how systems work and integrate; identify risks and opportunities for improvement or innovation; and relentlessly pursue implementation of scalable security solutions
Passion for security, innovation, and continuous improvement
Adaptability to change and context switching
Ability to design future direction of security capabilities and controls
Empathy and communication skills to understand and communicate complex subjects with associates of varying business and technical backgrounds
Ability to work with global teams
Strong understanding of various cloud service delivery models including IaaS, SaaS, and PaaS leveraging technologies including containers; APIs; data systems; and artificial intelligence
The Value You Deliver
Identify opportunities to improve security posture and execute or influence their implementation in collaboration with security stakeholders, platforms, and application teams
Provide thought leadership, influence, mentor and educate others to build secure applications and multi-tenant platforms in public cloud
Design, scale, and deploy cloud security controls and services
Leverage CI/CD tooling to build security and governance capabilities into DevOps processes
Bridge building between security and platform teams to motivate and illuminate the 'What, Why, and How' to solve complex security requirements
Provide security guidance and support to technologists building platforms and applications
Collaborate with audit and risk teams on risk identification and validation of controls
The Team
Fidelity Enterprise Cyber Security’s (ECS) mission is to protect the firm while enabling Fidelity innovation and application teams to go further, faster. Modern computing paradigms, cloud computing and open-source software offer tremendous potential to accelerate development and drive down costs. We bring together Architecture, Infrastructure, Development Tools, Security, Operations and Program Office functions to build/configure/sustain internal and external cloud infrastructure and platform offerings providing building blocks for application teams.
Certifications:
Category:
Information TechnologyMost roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.
Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.