IT Security Engineer

Job Overview: Fidelity is a financial institution driven by innovative technology designed to evolve our products, services and experience to exceed expectations and allow customers to bank when and where they want. Fidelity’s information technology department keeps internal and external software, hardware, systems and services online, updated and secure. If you’re an IT professional seeking opportunities to continually innovate and work for a company that shares that goal, let’s talk. The candidate for this position will be responsible for: Assisting in and supporting the design, implementation, and continuous improvement of the enterprise security architecture and overarching Information Security Program. Participating in the design, deployment, maintenance, and continued evolution of security tools and controls, including identity and access controls, monitoring capabilities, defensive security processes, SIEM, email security, firewalls, end point protection, and data loss prevention. Monitoring security alerts, investigating activity, and supporting incident response from detection through remediation. Conducting vulnerability scans, tracking findings to resolution, and working with system owners to prioritize and applying fixes. Administering and tuning the SIEM platform, including onboarding log sources, building and refining correlation rules and detection use cases, reducing false positives, and creating dashboards and reports to support threat detection, investigations, and compliance requirements. Performing security reviews of new systems, vendors, applications, network changes, branch initiatives, and enterprise projects to ensure appropriate security requirements are identified and implemented. Hardening operating systems, databases, network devices, application security, and cloud workloads against industry benchmarks such as NIST CSF Partnering with Information Technology Operations to improve identity and access controls, including privileges access, conditional access, role-based access, and user lifecycle security controls. Supporting audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, and maintaining documentation that demonstrates control effectiveness. Developing and maintaining security standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned security platforms and processes. Tracking emerging threats and vulnerabilities and recommending improvements to the Information Security Program. Participating in incident response exercises, tabletop drills, and on-call rotation as needed. Identifying opportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection capabilities, and mature overall security posture. Translating technical security issues into clear business risk language for IT, internal business units, risk, audit, and executive stakeholders. Maintaining a high degree of professionalism, discretion, integrity, and sound judgment when handling sensitive information and security incidents. Ensuring compliance with all banking laws, rules, regulations, and prescribed policies/practices/procedures necessary to reduce risk and uphold ethical standards related to and required by one's duties. Requirements for the position include: Ability to analyze and assess complex security issues and facilitate the development and implementation of effective compensating controls. Keen interest in both technical and business aspects of information security. Ability to use logic and reasoning to identify strengths and weaknesses. Critical thinking for medium to complex situations and a forensic approach to challenges. Willingness to handle confidential information with discretion and integrity. Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence. Attention to detail and a strong desire to learn and adaptability in the face of constant change. Working knowledge of security fundamentals: network security, encryption, PKI, authentication protocols, and secure architecture. Experience with security tooling such as the SIEM platform Splunk, the endpoint detection platform Tenable, and firewalls. Working knowledge of security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, NIST Cybersecurity Framework, and related industry guidance. Strong organizational skills with the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution. Preferred qualifications for this position include: Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred. Equivalent combination of education, technical certifications, and relevant experience may be considered. Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred. EEO/Veterans/Disabled