Senior Cybersecurity Ops & Response Analyst

##

Job Description:

Senior Incident Responder - Security Operations Center

The Opportunity

Fidelity's Security Operations Center is looking for a Senior Incident Responder to join the team investigating and containing threats against our global environment. This is a high-impact individual contributor role where your analysis and decisions directly reduce risk for Fidelity, its affiliates, partners, and millions of customers.

You won't just close tickets. You'll work investigations end to end, contribute to containment and eradication, and turn every incident into lasting improvements in our detection and response capability. If you thrive under pressure and are relentless about finding the truth in the data, this role was built for you.

What You'll DoRespond to Incidents

• Investigate security incidents from detection through containment, eradication, and recovery
• Work escalated and high-severity events alongside infrastructure, application, legal, and business teams
• Conduct network, host, cloud, and identity-based forensic analysis to scope compromise and identify indicators
• Perform malware triage and analysis to determine capability, persistence, and impact
• Produce clear, defensible incident documentation, timelines, and post-incident reports for technical and executive audiences

Drive Detection & Hunting

• Develop and refine threat detection content informed by attacker TTPs (MITRE ATT&CK)
• Participate in threat hunting initiatives that uncover gaps in visibility and coverage
• Feed lessons learned from investigations back into detections, runbooks, and automation
• Support alert triage during surge periods and share investigative technique with junior analysts

Shape Strategy

• Contribute to SOC leadership strategy, roadmap planning, and capability development
• Help build and exercise incident response playbooks, tabletop scenarios, and escalation paths
• Identify opportunities to apply automation and AI/LLM technologies to investigative workflows
• Champion continuous improvement across tools, processes, and team capabilities

What You BringRequired

• Established cybersecurity background. You understand the threat landscape, common attack vectors, and defensive operations without needing to be taught the fundamentals
• 3+ years in Information Security incident response, digital forensics, or SOC investigations
• Demonstrated experience investigating real intrusions, not just alert queue triage
• Deep familiarity with SIEM, SOAR, and EDR tooling in an enterprise environment
• Strong host-based forensics skills across Windows and Linux (file system, memory, registry, event log, and artifact analysis)