Job Description:

Principal Red Team Operator

The Red Team’s Mission is to enable Fidelity to improve detection, strengthen defenses, improve response strategies, train defenders, understand threats, and drive greater efficiency of the entire security program by emulating real-world attackers to challenge the current security controls in place.

This is done by performing authorized, adversary based, assessments for defensive purposes that include both announced cyber drills and unannounced attacks.

The team works closely with our Penetration Testing function who perform code-assisted assessments to harden Fidelity’s applications and infrastructure.

Fidelity has a large and diverse portfolio of products. This provides for a varied and exciting role by giving the team the opportunity to work across a multitude of different areas of the business.

The Role

• You will join a highly skilled team of operators in the planning and execution of red team campaigns that emulate real-world threat actors.
• You will develop, document, and operationalize tactics, techniques, tools and procedures that model the behaviors of potential external threats to our business.
• Upon completion of engagements, you will document vulnerabilities, prepare reports and present the results to application owners, developers, and business unit information security teams.
• You will partner with other teams within Enterprise Cybersecurity to improve the overall security of Fidelity's detective capabilities, applications, and infrastructure.

The Expertise and Skills You Bring

• Broad experience across multiple IT domains
• Proven analytical and problem-solving skills, as well as the desire to assist others in solving issues
• Advanced knowledge of application and network security vulnerabilities and best-practices
• Hands-on penetration testing / ethical hacking experience
• Hands on experience conducting red team campaigns.
• Highly motivated with the willingness to take ownership / responsibility for your work and the ability to work alone or as part of a team.
• Preferred: OSCP, OSCE, OSWE, GPEN, GXPN, CISSP, or other industry recognized security certification

The Team

The Red Team forms part of Security Assessment group within Enterprise Cybersecurity (ECS). The goal of the Security Assessment group is to proactively identify and remediate vulnerabilities in Fidelity’s applications and infrastructure. We work very closely with all of the key Business Units to ensure that they remain secure while they deliver key projects to advance the firm.

Please see below for the salary range for work locations in Colorado only:

Please see below for the salary range for work locations in New York City, Westchester County, NY and Jersey City, NJ only:

Please see below for the salary range for work locations in California only:

Please see below for the salary range for work locations in Washington only:

Certifications:

Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money.

At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a Best Place to Work in 2023. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined.

At Fidelity, our goal is for most people to work flexibly in a way that balances both personal and business needs with time onsite and offsite through what we’re calling "Dynamic Working."

We invite you to Find Your Fidelity at fidelitycareers.com.

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to accommodations @fmr.com, or by calling 800-835-5099, prompt 2, option 3.