Network Segmentation Analyst

We are seeking a thorough and proactive Data Analyst to support a workstream within our network segmentation program. The ideal candidate will have 2-5 years' experience analyzing large data sets consisting of both log and telemetry data to formulate network-based security policies in support of cyber network segmentation policy. Success in this role includes producing validated application flow maps and enabling enforcement of least-privilege network policies. As a valued team member, you will help ensure secure and compliant access across secure network boundaries, with a solid understanding of routing, firewall and IPS/IDS controls., * Analyze network traffic data (NetFlow, logs, packet captures) to identify application communication patterns and dependencies

• Develop and refine network segmentation policies aligned with security standards and Zero Trust principles
• Partner with engineering, cybersecurity, and application teams to validate dependencies and enforce least privilege connectivity
• Translate flow data and CMDB information into application dependency mappings
• Support implementation and tuning of policies across firewalls and security platforms (e.g., Cisco Firepower, IDS/IPS)
• Contribute to governance and compliance activities, ensuring adherence to internal policies and regulatory requirements
• Document findings, produce reports, and communicate insights to technical and non-technical stakeholders
• Identify opportunities to improve segmentation effectiveness and reduce attack surface

• Bachelor's degree in Information Security, Computer Science, or related field preferred.
• 2-5 years of hands-on experience in data analysis with a focus familiarity of network and network security.
• Experience supporting enterprise-level network environments
• Working knowledge of Splunk and Cisco Firepower in an enterprise environment.
• Familiarity with regulatory frameworks such as SOX, HIPAA, ISO 27001, or NIST.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation abilities.

Preferred Skills:

• Experience with scripting or automation (e.g., PowerShell, Python).
• Cisco Firepower, Check Point and Juniper firewall security policy management
• Snowflake and analytics visualization experience with Tableau/PowerBI.
• Understanding Zero Trust principles and least privilege access models.
• Certifications such as CISSP, CISM, or vendor-specific IAM/PAM certifications

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want! We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experiences. For information about working at Fidelity, visit FidelityCareers.com. Fidelity Investments is an equal opportunity employer. Fidelity will reasonably accommodate applicants with disabilities who need adjustments to complete the application or interview process. Fidelity TalentSource, is the in-house temporary staffing provider for Fidelity Investments. Unlike traditional staffing agencies, we are an internal business unit within Fidelity's Talent Acquisition team, dedicated to recruiting talent from various backgrounds for roles in Fidelity's regional and investor center locations. Our mission is to help you experience Fidelity's diverse and inclusive workplace while expanding your skill set and professional network, with the ultimate goal of conversion to full-time employment as part of Fidelity's long-term strategy.