Senior Analyst - Application Security

Responsibilities

• Act as a critical bridge between the Dalian security team and Canadian software engineering teams to ensure applications are secure by design
• Perform hands-on penetration testing to identify vulnerabilities in web applications and APIs
• Automate security checks by configuring DevSecOps tools to scan source code and runtime environments
• Integrate SAST, SCA, and DAST tools into CI/CD pipelines
• Collaborate directly with developers to provide clear, practical remediation advice and technical guidance
• Align working hours with North American time zones (approximately 2 days per week) for real-time collaboration and meetings

Requirements

• Fluent English communication skills, with the ability to host video calls and present technical findings to native speakers
• Proven hands-on experience in ethical hacking and penetration testing
• Deep expertise in Web Application and API security, including the OWASP Top 10
• Strong DevSecOps and CI/CD automation skills
• Experience with SAST, SCA, and DAST tool integration
• Ability to work evening/night shifts in Dalian to align with North American time zones

Benefits

• Comprehensive benefits package
• Support for professional development and wellbeing
• Flexible working approach to support work-life balance

About the Company

Fidelity has been helping clients build better financial futures for over 50 years. We work together globally to protect financial applications and data, ensuring security is integrated into everything we build.