Job Description
This engineering position is within the Application Security Tools Squad, which is a part of the Application and Infrastructure Security Product Area in the Enterprise Cybersecurity business unit.
Verizon's 2024 Data Breach Investigation Report (containing 10,000+ confirmed data breaches) states that approximately 70% of breaches involved exploitation of a web application. Fidelity manages hundreds of web applications on the Internet, releasing multiple updates monthly. These applications are the primary interface for our over 40 million customers, making their security vital for Fidelity's reputation and our customers' livelihoods.
The Application Security Tools Squad is dedicated to delivering innovative tools, libraries, and solutions that support and verify security measures implemented by Fidelity's extensive application development community, which includes over 10,000 developers. As a team member, you will play a key role in decision-making, deployment leadership, and system integration.
Our team comprises motivated individuals based in Ireland, working collaboratively in a dynamic, agile environment.
Required Expertise
* Preferred AWS certification and experience with cloud environments.
* Hands-on experience with automation and pipeline implementation, including testing and CI/CD pipelines.
* Experience with application security practices such as Pen Testing, SCA, SAST, DAST, and Web Application Firewalls is advantageous.
* Knowledge of data processes like ETL, ELT, Data Modeling, and proficiency with BI tools (PowerBi, Tableau, etc.), as well as Oracle or similar RDBMS, is a plus.
Skills You Bring
* Strong engineering skills with experience deploying scalable, maintainable multi-tier applications.
* Ability to design and develop tools using technologies such as Unix Shell scripting, Java, Python, and popular frameworks (Spring, SpringBoot, etc.).
* Experience with SOA and API frameworks (SOAP, REST), pipeline/build tools (GIT, Maven, Jenkins, AWS CFT/CDK), and front-end technologies (JavaScript, Angular, React).
* Experience with test automation and a security architecture mindset.
* Experience working in agile (Scrum) environments.
* Effective communication skills to positively influence peers.
* Strong analytical skills for solving complex issues and making timely decisions.
* A passion for continuous learning and team mentorship.
Value You Deliver
* Design, develop, test, deploy, and maintain SAST, SCA, and secret scanning tools within CI/CD pipelines.
* Evaluate and leverage open-source or vendor technologies to help eliminate application security vulnerabilities.
* Focus on engineering excellence by improving automation, test coverage, release velocity, and production health.
* Contribute to solving real-world problems and meeting consumer needs.
* Use strong communication and technical skills to participate in meaningful discussions.
For more like this, search #SWE
Category
Information Technology
#J-18808-Ljbffr