Technical Specialist - Detection, Engineering and Automation

Responsibilities

• Build, maintain, and enhance security detections using Sentinel-as-Code to ensure high-quality analytics
• Develop and maintain CI/CD pipelines to automate the deployment of detections, automation playbooks, and configuration updates
• Engineer and optimize SOAR automation and integrations to reduce manual analyst workload
• Onboard high-value security logs into the SIEM, ensuring proper normalization and integration into detection logic
• Support SOC and CIRT during security incidents by providing engineering expertise and rapid telemetry onboarding
• Maintain and improve security controls across SIEM, SOAR, EDR, email security, and network detection tooling
• Collaborate with global engineering teams and front-line analysts to deliver high-priority backlog items and process improvements

Requirements

• 4+ years of experience in Detection Engineering or hands-on engineering within a SOC environment
• Hands-on experience developing detections in Microsoft Sentinel, including strong KQL and detection-as-code practices
• Proven ability to build and maintain CI/CD pipelines using Azure DevOps or GitHub Actions
• Practical experience engineering SIEM, SOAR, or EDR platforms
• Strong experience with cloud platforms, specifically AWS and Azure, including native security telemetry
• Proficiency in scripting languages such as PowerShell, Python, Bash, or JavaScript
• Familiarity with YAML/JSON, IaC principles, and modern automation frameworks
• Experience with email security solutions (e.g., Proofpoint or Microsoft Defender for Office 365)

Preferred Qualifications

• Relevant certifications such as Microsoft SC-200, AZ-500, AWS Security Specialty, CySA+, SSCP, or OSCP

About the Company

Fidelity International is a value-driven, customer-obsessed organization. Our Global Cyber & Information Security (GCIS) team operates enterprise security services and controls designed to mitigate risks and ensure our business operates securely. Our innovative Cyber Defence Operations team provides proactive, cutting-edge solutions to protect our clients' digital assets and infrastructure against evolving cyber threats.