Cybersecurity Analyst (Internal Threat Operations)

Fidelity Investments - Merrimack, NH

Full-time - Entry Level

Merrimack, NH

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

Fidelity TalentSource is seeking a Cybersecurity Analyst to join our Internal Threat Operations team, focusing on investigating potential instances of data loss caused by insider actions. This role is critical in ensuring the security of our enterprise by utilizing investigative and communication skills to identify incidents and engage with business partners to resolve them. The Cybersecurity Analyst will work closely with various teams, including Platform Operations, Security Operations Center, Legal, and Employee Relations, to maintain strong controls and ensure compliance with employee privacy regulations and legal requirements. The Cybersecurity Analyst will be responsible for responding to security incidents in a production environment, analyzing alerts, and applying investigative skills to determine the nature of potential threats. This position requires a solid understanding of cybersecurity threats, incident response, and control technologies. The ideal candidate will have experience with enterprise endpoint or infrastructure Data Loss Prevention (DLP) solutions and will be proficient in using tools such as SPLUNK for data analysis. Additionally, the role demands strong written and verbal communication skills to effectively convey findings to non-technical stakeholders. As part of the Internal Threat Operations team, the Cybersecurity Analyst will contribute to the detection, investigation, and response to insider incidents across the firm. This dynamic role offers the opportunity to work in a collaborative environment while developing skills in cybersecurity and incident management. The position is based in Merrimack, NH, or Westlake, TX, and supports a hybrid working model, requiring onsite presence for at least one week every four weeks.

Responsibilities

• Investigate potential instances of data loss caused by insider actions.
• Engage with business partners to resolve security incidents following standard operating procedures.
• Analyze alerts and apply investigative skills to determine the nature of potential threats.
• Document evidence clearly and concisely for non-technical stakeholders.
• Coordinate with various teams to ensure strong security controls and compliance with regulations.
• Utilize tools such as SPLUNK for data analysis and incident response.

Requirements

• Degree or equivalent experience in Cybersecurity, Information Security, Computer Science, Engineering, or related field.
• 1-3 years operational experience responding to security incidents in a production environment.
• Solid grasp of cybersecurity threats and attacks, incident response, and control technologies.
• Experience coordinating enterprise endpoint or infrastructure DLP solutions is preferred.
• Knowledge and experience with systems administration and automation using scripting languages such as Python, Perl, and PowerShell.
• Familiarity with Data Repository Architecture (EDMS, SharePoint, O365, OneDrive, etc.), TCP/IP, and Active Directory.

Nice-to-haves

• Experience with Windows and/or Linux operating systems.
• Insights regarding the security threat landscape, especially network and server threats.

Benefits

• Flexible working model with hybrid schedule options.
• Opportunity to work in a collaborative and supportive culture.
• Professional development and skill expansion opportunities.