Senior Cybersecurity Platform Engineer

Job Description:

This Senior Engineering position is within the Application Security Tools Squad, which is a part of the Application and Infrastructure Security Product Area in the Enterprise Cybersecurity Business Unit.

According to Verizon's 2022 Data Breach Investigation Report, which includes over 5,000 confirmed data breaches, approximately 70% of breaches were due to web application exploits. Fidelity operates numerous web applications that are frequently updated and released to production. These applications serve as the primary interface for over 40 million customers, making their security paramount to both Fidelity's reputation and the financial well-being of our customers.

The Application Security Tools Squad is dedicated to delivering cutting-edge tools, libraries, and solutions that support and validate the implementation of security measures by Fidelity's vast application development community, comprising over 10,000 developers. As a team member, you will play a pivotal role in steering decisions, leading deployments, and crafting integrations with our current systems.

Our squad consists of driven and committed individuals based in North America and Ireland, all collaborating in a dynamic, agile work environment.

The Expertise You Have

• AWS certification preferred and have working experience with cloud environments.

• Hands on experience with automation & pipeline implementation (Testing, Continuous Integration / Continuous Delivery pipeline).

• Any application security experience, including Pen Testing, Static Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF) would be considered a plus.

• Experience with data processes, including but not limited to ETL, ELT, Data Modeling, and proficiency with BI tools like PowerBi, Tableau, or similar, as well as Oracle or equivalent RDBMS, is also advantageous.

The Skills You Bring

• You possess strong engineering skills and have experience deploying maintainable, scalable multi-tiered applications.

• You are capable of designing and developing tools/applications using some of the following technologies: Unix and Shell scripting; Common programming languages such as core Java, Python, etc; Popular opensource frameworks/libraries (e.g. Spring, Springboot, Apache Commons, etc.); SOA and API frameworks such as SOAP and REST; Pipeline/Build tools including GIT, Maven, Jenkins, Jenkins Core, and AWS CFT/CDK; Front end languages/frameworks including JavaScript/Typescript, jQuery, Angular, NodeJS, Springboard and React a plus.

• You have experience with test automation, including solid understanding of test tools.

• You have a security architecture mentality.

• You have experience working in an agile environment (Scrum).

• Ability to communicate optimally to positively influence peers, business unit and technology decision makers.

• Strong analytical skills and ability to tackle issues and work through ambiguous situations by making timely decisions based on facts, knowledge, experience, and judgement.

• You have a passion for continual learning and are always ready to guide, support and/or mentor other members of your team!

The Value You Deliver

• Design, develop, test, deploy and maintain SAST, SCA and secret scanning tools into the CI/CD pipeline and developer workflow tools.

• Evaluate and leverage opensource or vendor technologies, to support the Fidelity development community in eliminating application security vulnerabilities from their applications.

• Continued focus on engineering excellence, including improving automation, test coverage, release velocity and production health.

• You are a creator and a doer who will help us tackle real-life problems and meet real consumer needs.

• You have strong communication skills and technical expertise to drive and participate in meaningful discussions. You are a collaborative team-player in an autonomous team, owning all aspects of delivery (coding, quality, DevSecOps). You build relationships with key business partners and quickly establish trust to ensure effective delivery.

For more like this search #Cyber

Category: