Posted 9 days ago
No clicks
**Senior Analyst - Digital Assets Security** Lead security assessments for blockchain, smart contracts, dApps, and digital assets at Fidelity Digital Asset Management. Evaluate security of blockchain implementations, review third-party audit findings, and drive remediation. Define security governance, collaborate with cross-functional teams, and monitor emerging threats. Requires 7+ years in InfoSec, 3+ years in blockchain/digital asset security, and a bachelor's degree. Preferred: experience with Solidity, Ethereum, and relevant security tools. CISSP, CISM, or other certifications preferred.
- Compensation
- $89,000 – $180,000 USD
- City
- Not specified
- Country
- Not specified
Currency: $ (USD)
Full Job Description
Job Description:
Note: Fidelity will not provide immigration sponsorship for this position
The Role
We are seeking a highly motivated Senior Security Analyst Blockchain, Digital Assets & Smart Contract Security to join our Information Security organization. This role will help secure the firm's adoption of blockchain technologies, digital assets, tokenization platforms, and smart contract-enabled solutions.
As a subject matter expert in blockchain security, you will partner with engineering, architecture, risk, compliance, and product teams to assess emerging technologies and ensure they are deployed securely and in alignment with the firm's risk appetite, regulatory obligations, and security standards.
- Lead security assessments, threat modeling, and architecture reviews for smart contracts, decentralized applications (dApps), blockchain infrastructure, and digital asset platforms, identifying and driving remediation of vulnerabilities such as reentrancy, access control weaknesses, oracle manipulation, flash loan attack vectors, MEV/front-running risks, and governance or upgradeability flaws before production deployments
- Evaluate the security of blockchain implementations, including digital asset custody solutions, wallet technologies, key management controls, custodians, validator nodes, node gateways, APIs, oracles, cross-chain solutions, tokenization platforms, and staking initiatives, providing recommendations for secure design, implementation, and operation.
- Review third-party audit findings and validate remediation efforts while partnering with engineering, product, architecture, and security teams to provide security guidance throughout the development lifecycle and prior to production deployment.
- Develop and support security governance, standards, controls, and compliance requirements for blockchain and digital asset technologies, collaborating with Legal, Compliance, Enterprise Risk, and Audit teams to support regulatory examinations, control assessments, and internal audits.
- Monitor emerging blockchain threat and industry attack trends, assess impact to the organization, and recommend proactive security controls and risk mitigation strategies.
- Investigate blockchain-related security incidents and suspicious on-chain activity, perform root-cause analyses, and drive corrective actions
The Expertise and Skills You Bring
- 7+ years of experience in Information Security, Application Security, Security Engineering, or Cyber Risk and a bachelors degree in a related field
- 3+ years of hands-on experience with blockchain, digital assets, or smart contract security
- Experience conducting security assessments and threat modeling exercises
- Strong understanding of secure software development practices and application security principles
- Experience communicating technical risk to both technical and non-technical stakeholders
Preferred Qualifications
- Hands-on experience reviewing Solidity smart contracts
- Familiarity with Ethereum, EVM-based platforms, Layer-2 technologies, and blockchain infrastructure
- Experience assessing DeFi protocols, tokenization platforms, or digital asset custody solutions
- Knowledge of cryptography, public key infrastructure, digital signatures, and key management
- Experience using security assessment tools such as: Slither, Mythril, Echidna, Hardhat, or Foundry
- Experience in financial services, banking, asset management, fintech, or capital markets
- Familiarity with cloud security platforms specifically, AWS
- Understanding of regulatory and risk management frameworks
- One or more of the following certifications is preferred: CISSP, CISM, CRISC, CCSP, OSCP, GIAC certifications, or Blockchain security certifications
The Team
Fidelity Digital Asset Management [FDAM] is building an investment platform offering digital asset products and services designed to meet the growing needs of Fidelitys retail customers, intermediaries, and institutional clients.
The Investment Risk Management team is part of the business function at FDAM and is responsible for providing independent oversight of risks associated with the creation, management, and operation of digital asset investment products with broader adoption and institutionalization of digital assets as a key driver. The team's mandate covers trading, portfolio management, settlement, custody, security, and portfolio origination risks, while also addressing the evolving information security and cyber risk landscape inherent to digital asset markets. This includes evaluating the adequacy of cybersecurity controls, digital asset protection mechanisms, technology resilience, third-party risk management practices, and governance frameworks designed to safeguard client assets and support secure investment operations.
Fidelitys Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Placement in the range will vary based on job responsibilities and scope, geographic location, candidates relevant experience, and other factors.
Base salary is only part of the total compensation package. Depending on the position and eligibility requirements, the offer package may also include bonus or other variable compensation.
We offer a wide range of benefits to meet your evolving needs and help you live your best life at work and at home. These benefits include comprehensive health care coverage and emotional well-being support, market-leading retirement, generous paid time off and parental leave, charitable giving employee match program, and educational assistance including student loan repayment, tuition reimbursement, and learning resources to develop your career. Note, the application window closes when the position is filled or unposted.
Please be advised that Fidelitys business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
Certifications:
Category:
Information TechnologyApply
All fields are required. Candidates should limit the number of roles they apply to at any given time.
Benefits that balance life and work
From our fully paid parent leave to our on-site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.
Company overview
Company overview
At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience.
Reasonable accommodations
Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.
Equal opportunity employer
Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
Applicant screening
At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.
AI Guidelines
Learn about our guidelines for use of AI when applying for a Fidelity job
