Find work in the United States.

A simpler way to find your next job.

Jobs in the United States

25+ jobs

Save this search

Added 7 mins ago
Contractor - Scrum Master - Remote US
SAMC SitusAMC Holdings Corp
Remote, United States
This position will be responsible for leading scrum ceremonies, organizing and motivating software development teams to deliver software that provides exceptional business value to users.
Added 13 mins ago
Project Controls & Assurance Analyst
Energy Northwest
Richland, WA
Serve as a trusted advisor by providing business consulting services to designated project groups for a broad range of both Capital and Operation & Maintenance (O&M) projects. Promote sound…
Added 13 mins ago
Business Intelligence Analyst
Highmark Health
Olympia, WA
Works with Business Intelligence and healthcare professionals to gather, organize, and present data to users. Presents meaningful analytics to the business in non-technical terms and…
Added 13 mins ago
AT
Senior Business Systems Analyst
Akamai Technologies, Inc.
Olympia, WA
- $88,900 to $160,100 USD / year
As a Senior Business Systems Analyst, you will work closely with business stakeholders, developers, and QA teams delivering enterprise application enhancements/integrations. You will be…
Added 21 mins ago
Senior Business Analyst / Scrum Master
Steampunk
McLean, VA
As a Steampunk Senior Business Analyst / Scrum Master, you’ll serve as both Business Analyst and Scrum Master on an Agile software development team, analyzing mission and business needs,…
Added 21 mins ago
Development Analyst
SWBC PEO
Boerne, TX
The Deployment Analyst performs contract compliance review on behalf of client agencies. This role owns the review end to end for its assigned clients: identifying non-compliant events,…
Added 22 mins ago
Counterintelligence/Information Operations Intelligence (CI/IOI) Analyst - Senior
GD Information Technology, Inc.
United States
…HAF A3O-QI, Pentagon, Washington, DC. IO Intelligence / CI Analyst responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP)…
Added 29 mins ago
Business Analyst
CACI International
Scott AFB, IL
Minimum five (5+) years’ experience as a business analyst on iterative software development projects.
Added 29 mins ago
Pricing Strategy Analyst
RealPage, Inc.
Richardson, TX
The Pricing Strategy Analyst will support RealPage’s enterprise pricing and monetization strategy through quantitative analysis, financial modeling, competitive intelligence, and pricing…
Added 30 mins ago
Consulting Analyst
AON
Chicago, IL
…institutional advisory, wealth management, institutional advisory, and business management services to individuals, families, and institutions across the United States, Canada, and the…
Added 35 mins ago
System Analyst, IT AMI Implementation Technology
CECONY
NY
The Systems Analyst will function as a member of a collaborative team by contributing to software upgrades through consistent development practices (tools, common components, and…
Added 51 mins ago
Financial Analyst Intermediate
University of Kansas
Lawrence, KS
The University of Kansas has an opening for a Financial Analyst Intermediate. This position will work with Budget Officers in the various schools/units to balance budget allocations to…
Added 52 mins ago
BH
Financial Planning & Analysis (FP&A) Level II or Senior Analyst
Black Hills Energy
Wichita, KS
- $79,400 to $139,900 USD / year
…allowing for opportunity to collaborate and understand our business from a centralized function. You'll be a valued team member in a highly cross functional environment that is involved…
Added 1 hour ago
NH
Senior Product Services & Management Analyst - Epic Dorothy & Comfort (Clinical)
Northwell Health
Lake Success, NY
- $85,090 to $147,220 USD / year
…products and solutions following the hybrid product/project development and implementation…
Added 1 hour ago
F
Payroll Analyst - FlexStaff (TEMP)
FlexStaff
New Hyde Park, NY
- $25 USD / hour
Analyzes, verifies, tracks and maintains department related databases and software. Assists in the development and implementation of new monitoring tools. Provides analytical support in the…
Added 1 hour ago
Decision Support Analyst
Kaleida Health
OLEAN, NY
…and monthly database updates and audits. The Decision Support Analyst will act as a consultant to stakeholders to initiate, coordinate and provide expertise in Decision Support analytic…
Added 1 hour ago
JD Edwards Developer Analyst
Pernod Ricard USA
WHITE PLAINS, NY
…Developer is to handle technical service requests and provide business applications support for JD Edwards and ancillary systems. This includes analyzing, trouble shooting, and supporting…
Added 1 hour ago
P
Sr. Associate
Pfizer
New York City, NY
- $79,400 to $132,400 USD / year
The Senior Associate, Solutions Software Engineer is a hands-on individual contributor who designs, builds, integrates, and supports digital solutions using approved enterprise platforms,…
Added 1 hour ago
Procurement Analyst 2
Huntington Ingalls Industries
Syracuse, NY
…in cybersecurity, network architecture, reverse engineering, software and hardware development uniquely enable us to support sensitive missions for the U.S. military and federal agency…
Added 1 hour ago
Quantitative Analyst - C13 - NEW YORK
Citigroup
New York, NY
…analytics. This role sits at the center of Citi's Global Markets business, where your development expertise will directly shape pricing accuracy and risk…
Added 1 hour ago
IT Business Lead Analyst - Vice President
Citigroup
New York, NY
The IT Business Lead Analyst is responsible for liaising between business users and technologists to exchange information in a concise, logical and understandable way in coordination with…
Added 1 hour ago
Junior-Level Business Analyst
CGI Technologies and Solutions, Inc.
North Charleston, SC
Do you have a proven interest in information technology and business and a passion for learning? Are you a go to problem solver that is motivated to make an impact by crafting customized…
Added 1 hour ago
Senior Software Developer
Fluor
Greenville, SC
…leadership for end user project support, project configuration, development or special project modifications required for automation systems. Additionally, the position provides technical…
Added 1 hour ago
Quality Assurance Analyst
HTC Global Services Inc
Columbia, SC
The Senior Quality Analyst will lead data mapping and QA activities, identify software functionality gaps, recommend improvements, and prepare documentation supporting software…
Added 2 hours ago
Credit Analyst III - Ag
First Interstate Ban
Greeley, CO
…you a natural fit for #TeamFirstInterstate.SUMMARYThe Credit Analyst III is responsible for independently evaluating and underwriting complex AgriBusiness commercial credits including…

Closed listing

FIS Global

Analyst Lead, Cybersecurity

Brown Deer, WI, United States
Jacksonville, FL, United States
Atlanta, GA, United States

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Job details

Posting language: English
Posted: Nov 3, 2026

Similar jobs hiring now

Search current openings

Original job description

Archived listing. The details below describe a past opening.

Position Type :

Full time Type Of Hire :

Experienced (relevant combo of work and education)

Job Description

About FIS

At FIS, progress starts with people. We believe diverse perspectives lead to stronger ideas, better solutions and greater impact. If you’re looking for a place where you can contribute, grow and help advance the future of financial technology, your next opportunity is here.

About the role

As a Senior Application Security Engineer in FIS Cybersecurity, you will be a hands-on technical leader in our Attack Surface Management function.

You will identify, assess and reduce security risk across web, API, mobile, cloud-native and AI-enabled applications that support global financial services. You will perform deep technical assessments, including SAST, DAST, SCA, manual source code review, threat modeling, Infrastructure as Code (IaC) and container security, and Android and iOS penetration testing.

You will also shape the security policies, encryption standards and secure development practices that engineering teams across FIS follow. You will serve as a subject matter expert who can find complex vulnerabilities, explain their business impact and help development teams fix them at scale.

What you will be doing

Own and continuously improve the application attack surface management program. This includes discovering, inventorying and risk-ranking internet-facing applications, APIs, mobile apps and cloud assets, and finding shadow IT and unmanaged exposure.
Perform and oversee static application security testing (SAST) and dynamic application security testing (DAST). You will tune rulesets, triage findings, reduce false positives and integrate scanning into CI/CD pipelines.
Conduct in-depth manual source code reviews across languages such as Java, C#/.NET, Python, JavaScript/TypeScript, Cobol, Go and Kotlin/Swift. You will look for business logic flaws, injection, authentication and authorization weaknesses, insecure deserialization, cryptographic misuse and race conditions.
Lead API security assessments for REST, GraphQL, gRPC and SOAP services. These cover authentication and authorization (OAuth 2.0, OIDC, JWT, mTLS), broken object-level and function-level authorization, rate limiting, mass assignment and alignment with the OWASP API Security Top 10.
Facilitate threat modeling sessions using methodologies such as STRIDE, PASTA or attack trees. You will produce data flow diagrams and trust boundary analyses and turn the results into actionable security requirements and design changes.
Perform Android and iOS application penetration testing. This includes static and dynamic analysis, reverse engineering, runtime instrumentation, testing root, jailbreak and tamper detection, certificate pinning bypass, and assessing insecure data storage and inter-process communication, all aligned to OWASP MASVS and MASTG.
Run software composition analysis (SCA) to identify vulnerable and non-compliant open-source components. You will drive Assessment for license risk and coordinate dependency remediation and supply chain security practices.
Assess IaC templates such as Terraform, CloudFormation, ARM/Bicep, Helm and Ansible for misconfigurations and policy violations, and enforce guardrails through policy-as-code.
Secure containerized and orchestrated workloads. You will scan images, harden base images, review Kubernetes configurations (RBAC, network policies, pod security, secrets management), sign images and secure container registries and runtimes.
Define, review and maintain encryption and cryptography policies. These include TLS configuration, key management and rotation, HSM and KMS usage, approved algorithms, data-at-rest and data-in-transit protection, and alignment with standards such as FIPS 140-3 and NIST guidance.
Review application security policies, standards and secure SDLC procedures, and update them to reflect emerging threats, regulatory changes and industry best practices.
Apply AI in security. You will assess the security of AI and LLM-enabled applications against risks such as prompt injection, data leakage, model abuse and insecure output handling, using references like the OWASP Top 10 for LLM Applications. You will also use AI and automation to speed up vulnerability discovery, triage and remediation guidance.
Support PCI DSS compliance by mapping application security controls to relevant requirements, particularly Requirement 6 (develop and maintain secure systems and software) and payment page script integrity. You will also support audits and evidence collection.
Partner with development, DevOps, cloud and product teams to explain vulnerabilities, validate fixes and embed security into the development lifecycle. You will provide clear risk ratings and remediation guidance.
Mentor junior team members, contribute to security tooling and automation, and represent application security in architecture and design reviews.

What you bring

9+ years of experience in software development and application security, with at least 5 years of hands-on work in SAST, DAST, SCA, API security, manual secure code review, threat modeling and container security.
Proven experience with application, API and mobile security assessments using tools such as Burp Suite Professional, Checkmarx, OWASP ZAP, Postman, AppScan, WebInspect, Fortify, Veracode or Semgrep.
Hands-on Android and iOS penetration testing experience using tools such as MobSF, Frida, Objection, Jadx, apktool, Hopper/Ghidra and Xcode/Android Studio, with a strong understanding of OWASP MASVS and MASTG.
Strong manual source code review skills in at least two major programming languages, with the ability to identify complex and logic-based vulnerabilities that automated tools miss.
Expert knowledge of the OWASP Top 10, OWASP API Security Top 10, SANS/CWE Top 25 and common attack techniques, including how to exploit, validate and remediate them.
Hands-on experience securing IaC and containerized environments using tools such as Checkov, tfsec, KICS, Trivy, Grype, Snyk Container or Prisma Cloud, along with working knowledge of Docker and Kubernetes.
Strong knowledge of cryptography and data protection, including encryption standards, key management, PKI, TLS and secure secrets handling, plus experience writing or reviewing encryption policies.
Experience integrating security testing into CI/CD pipelines such as Jenkins, GitHub Actions, GitLab CI or Azure DevOps.
Working knowledge of PCI DSS requirements as they apply to secure software development and application security.
Excellent communication skills, with the ability to explain technical risk to engineers and leadership and to build effective working relationships with colleagues and clients.

Preferred qualifications

Experience with SCA and supply chain security tools such as Checkmarx, Black Duck, Snyk, or Dependency-Track, and with SBOM standards.
Experience assessing AI/LLM-enabled applications or using AI and machine learning to improve security testing and triage.
Experience with external attack surface management platforms and asset discovery techniques.
Familiarity with cloud security on AWS, Azure or GCP, including identity and access management, network security and cloud-native security services.
Experience with policy-as-code frameworks such as OPA/Rego or Sentinel.
Knowledge of malicious code analysis, reverse engineering and advanced exploitation techniques.
Broad working knowledge of identity and access management, privileged access and threat and vulnerability management.
Relevant certifications such as OSCP, OSWE, GWAPT, GMOB, eMAPT, CSSLP, CISSP, CKS or equivalent.
Experience working in financial services or other highly regulated environments.

What we offer you

A modern, international work environment and a dedicated, motivated team.
A broad range of professional education and personal development opportunities.
The chance to work on challenging, relevant issues in financial services and technology.
A work environment built on collaboration, flexibility, and respect.
Varied and challenging work that helps you grow your product, functional, domain, and leadership skillset.

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

EEOC Statement

FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

About employer

More about this job

Skills

Cybersecurity
Infrastructure as code
Penetration testing
CI/CD
Oracle Java
C#
.NET
Python
JavaScript
TypeScript
COBOL
Go
Kotlin
Swift
GraphQL
Security regulations
Reverse engineering
Data storage
Communication skills
Supply chain management
IBM Terraform
Ansible
Scan photos
Kubernetes
Regulatory compliance
Software development
OWASP ZAP
Postman
HP WebInspect
Ghidra
Xcode
Docker
Data protection
Jenkins
GitHub
GitLab
Microsoft Azure
DevOps
Leadership
AWS

Report this job