Director, Cloud Security Specialist

Job Description :

The Cloud Security Center of Excellence within Fidelity Enterprise Cyber Security (ECS) is seeking a cloud or data platforms focused security engineer who has broad security domain knowledge including platform access models, logical perimeter, encryption, compliance, threat modeling and risk mitigation. As part of the team, they will deliver bar-raising security consultation and guidance within various cloud service providers (CSPs) and Fidelity hosted platforms. The ideal candidate should have deep understanding of at least one CSP and the unique challenges of securing cloud workloads and managing the security posture of large scale environments in a DevOps operating model.

The Expertise You Have and The Skills You Bring

5+ years of experience in securing infrastructure, platforms, and compliance

Proven experience in consulting or advisory capacity

Understand and promote security best practices at all levels of the organization

Strong understanding of cloud service providers : AWS, Azure, etc.

Securing Data Platforms such as Kafka, Oracle, PostgreSQL, etc.

Multi-tenant platform or service delivery

Continuous Compliance and Auditing methodologies

Scripting automation or developing software : Python, PowerShell, NodeJS, etc.

Implementing infrastructure-as-code concepts and technologies

Exposure to or securing Artificial Intelligence a plus

Curiosity and self-starting nature to learn how systems work and integrate; identify risks and opportunities for improvement or innovation; and relentlessly pursue implementation of scalable security solutions

Passion for security, innovation, and continuous improvement

Adaptability to change and context switching

Ability to design future direction of security capabilities and controls

Empathy and communication skills to understand and communicate complex subjects with associates of varying business and technical backgrounds

Ability to work with global teams

Strong understanding of various cloud service delivery models including IaaS, SaaS, and PaaS leveraging technologies including containers; APIs; data systems; and artificial intelligence

The Value You Deliver

Identify opportunities to improve security posture and execute or influence their implementation in collaboration with security stakeholders, platforms, and application teams

Provide thought leadership, influence, mentor and educate others to build secure applications and multi-tenant platforms in public cloud

Design, scale, and deploy cloud security controls and services

Leverage CI / CD tooling to build security and governance capabilities into DevOps processes

Bridge building between security and platform teams to motivate and illuminate the 'What, Why, and How' to solve complex security requirements

Provide security guidance and support to technologists building platforms and applications

Collaborate with audit and risk teams on risk identification and validation of controls

The Team

Fidelity Enterprise Cyber Security's (ECS) mission is to protect the firm while enabling Fidelity innovation and application teams to go further, faster. Modern computing paradigms, cloud computing and open-source software offer tremendous potential to accelerate development and drive down costs. We bring together Architecture, Infrastructure, Development Tools, Security, Operations and Program Office functions to build / configure / sustain internal and external cloud infrastructure and platform offerings providing building blocks for application teams.

Certifications : Category : Information Technology

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and / or associating with individuals with certain Criminal Histories.