Senior Security Automation Engineer — Security Operations Center

Job description

Fidelity will not provide immigration sponsorship for this position. Job Description: The Role As a Senior Security Automation Engineer in Fidelity’s Security Operations Center, we are building and advancing automation capabilities that strengthen global security operations and help protect Fidelity, its affiliates, partners, and customers. This role is focused on designing and developing security automation platforms, improving detection and response workflows, and creating scalable solutions that enable security analysts to investigate and respond to threats more effectively. Working at the intersection of software engineering and cybersecurity, this engineer is developing Python-based services and integrations, enhancing security monitoring and response capabilities, and identifying opportunities to apply artificial intelligence to security operations. The role is also leading technical improvements, supporting threat hunting and incident response, and shaping the strategy and roadmap for security automation. The Expertise and Skills You Bring 3+ years of experience in information security incident response, detection engineering, security automation, or a closely related field. Strong Python development experience building automation, tooling, integrations, or backend services. Experience with enterprise security technologies for security information and event management, security orchestration and automated response, and endpoint detection and response. Hands-on experience with containers and cloud environments, including technologies such as Docker, Kubernetes, Microsoft Azure, and Amazon Web Services. Understanding of network protocols, host-based forensic analysis, common attack techniques, and security incident investigation. Ability to translate security challenges into scalable technical solutions and communicate technical concepts clearly to security analysts, engineers, and leaders. Experience with production Kubernetes, infrastructure as code, front-end development, systems architecture, or applying artificial intelligence and large language models to security workflows is preferred. Security certifications such as GCIH, GCFA, OSCP, CISSP, or comparable credentials are a plus. The Team Fidelity’s Security Operations Center helps protect the company by detecting, investigating, and responding to cybersecurity threats while continuously improving the technology and processes that support those efforts. We have a relentless commitment to protecting our customers and business, and our security automation capabilities help analysts work more efficiently, improve detection coverage, and respond to potential threats faster. Our team partners across cybersecurity, technology, engineering, and business groups, while also working with external technology and security providers to strengthen Fidelity’s defenses. Our greatest asset is our people, and we value learning, knowledge sharing, thoughtful experimentation, and using data and technology to continuously improve how we protect Fidelity. Fidelity’s Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles. Certifications: Category: Information Technology Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.