{"id":3704815,"url":"https://alion.io/job/fis-analyst-lead-cybersecurity-2","title":"Analyst Lead, Cybersecurity","company":{"id":4808,"name":"FIS","domain":"fisglobal.com","url":"https://alion.io/company/fis","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":82,"ghost_share":0,"stale_share":0.634,"repost_share":0.037,"time_to_fill_p50_days":27,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"Checkmarx","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"CWE","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"GraphQL","optional":false},{"name":"gRPC","optional":false},{"name":"Grype","optional":false},{"name":"Helm","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"KICS","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"MobSF","optional":false},{"name":"Objection","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"Postman","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SOAP","optional":false},{"name":"STRIDE","optional":false},{"name":"Swift","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"TypeScript","optional":false},{"name":"Veracode","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"Machine Learning","optional":true},{"name":"OWASP Dependency-Track","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-11-03T20:41:18Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-07T04:07:14Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Job Description\nAbout FIS \nAt FIS, progress starts with people. We believe diverse perspectives lead to stronger ideas, better solutions and greater impact. If you’re looking for a place where you can contribute, grow and help advance the future of financial technology, your next opportunity is here.\nAbout the role\nAs a Senior Application Security Engineer in FIS Cybersecurity, you will be a hands-on technical leader in our Attack Surface Management function.\nYou will identify, assess and reduce security risk across web, API, mobile, cloud-native and AI-enabled applications that support global financial services. You will perform deep technical assessments, including SAST, DAST, SCA, manual source code review, threat modeling, Infrastructure as Code (IaC) and container security, and Android and iOS penetration testing.\nYou will also shape the security policies, encryption standards and secure development practices that engineering teams across FIS follow. You will serve as a subject matter expert who can find complex vulnerabilities, explain their business impact and help development teams fix them at scale.\nWhat you will be doing\nOwn and continuously improve the application attack surface management program. This includes discovering, inventorying and risk-ranking internet-facing applications, APIs, mobile apps and cloud assets, and finding shadow IT and unmanaged exposure.\nPerform and oversee static application security testing (SAST) and dynamic application security testing (DAST). You will tune rulesets, triage findings, reduce false positives and integrate scanning into CI/CD pipelines.\nConduct in-depth manual source code reviews across languages such as Java, C#/.NET, Python, JavaScript/TypeScript, Cobol, Go and Kotlin/Swift. You will look for business logic flaws, injection, authentication and authorization weaknesses, insecure deserialization, cryptographic misuse and race conditions.\nLead API security assessments for REST, GraphQL, gRPC and SOAP services. These cover authentication and authorization (OAuth 2.0, OIDC, JWT, mTLS), broken object-level and function-level authorization, rate limiting, mass assignment and alignment with the OWASP API Security Top 10.\nFacilitate threat modeling sessions using methodologies such as STRIDE, PASTA or attack trees. You will produce data flow diagrams and trust boundary analyses and turn the results into actionable security requirements and design changes.\nPerform Android and iOS application penetration testing. This includes static and dynamic analysis, reverse engineering, runtime instrumentation, testing root, jailbreak and tamper detection, certificate pinning bypass, and assessing insecure data storage and inter-process communication, all aligned to OWASP MASVS and MASTG.\nRun software composition analysis (SCA) to identify vulnerable and non-compliant open-source components. You will drive Assessment for license risk and coordinate dependency remediation and supply chain security practices.\nAssess IaC templates such as Terraform, CloudFormation, ARM/Bicep, Helm and Ansible for misconfigurations and policy violations, and enforce guardrails through policy-as-code.\nSecure containerized and orchestrated workloads. You will scan images, harden base images, review Kubernetes configurations (RBAC, network policies, pod security, secrets management), sign images and secure container registries and runtimes.\nDefine, review and maintain encryption and cryptography policies. These include TLS configuration, key management and rotation, HSM and KMS usage, approved algorithms, data-at-rest and data-in-transit protection, and alignment with standards such as FIPS 140-3 and NIST guidance.\nReview application security policies, standards and secure SDLC procedures, and update them to reflect emerging threats, regulatory changes and industry best practices.\nApply AI in security. You will assess the security of AI and LLM-enabled applications against risks such as prompt injection, data leakage, model abuse and insecure output handling, using references like the OWASP Top 10 for LLM Applications. You will also use AI and automation to speed up vulnerability discovery, triage and remediation guidance.\nSupport PCI DSS compliance by mapping application security controls to relevant requirements, particularly Requirement 6 (develop and maintain secure systems and software) and payment page script integrity. You will also support audits and evidence collection.\nPartner with development, DevOps, cloud and product teams to explain vulnerabilities, validate fixes and embed security into the development lifecycle. You will provide clear risk ratings and remediation guidance.\nMentor junior team members, contribute to security tooling and automation, and represent application security in architecture and design reviews.\nWhat you bring\n9+ years of experience in software development and application security, with at least 5 years of hands-on work in SAST, DAST, SCA, API security, manual secure code review, threat modeling and container security.\nProven experience with application, API and mobile security assessments using tools such as Burp Suite Professional, Checkmarx, OWASP ZAP, Postman, AppScan, WebInspect, Fortify, Veracode or Semgrep.\nHands-on Android and iOS penetration testing experience using tools such as MobSF, Frida, Objection, Jadx, apktool, Hopper/Ghidra and Xcode/Android Studio, with a strong understanding of OWASP MASVS and MASTG.\nStrong manual source code review skills in at least two major programming languages, with the ability to identify complex and logic-based vulnerabilities that automated tools miss.\nExpert knowledge of the OWASP Top 10, OWASP API Security Top 10, SANS/CWE Top 25 and common attack techniques, including how to exploit, validate and remediate them.\nHands-on experience securing IaC and containerized environments using tools such as Checkov, tfsec, KICS, Trivy, Grype, Snyk Container or Prisma Cloud, along with working knowledge of Docker and Kubernetes.\nStrong knowledge of cryptography and data protection, including encryption standards, key management, PKI, TLS and secure secrets handling, plus experience writing or reviewing encryption policies.\nExperience integrating security testing into CI/CD pipelines such as Jenkins, GitHub Actions, GitLab CI or Azure DevOps.\nWorking knowledge of PCI DSS requirements as they apply to secure software development and application security.\nExcellent communication skills, with the ability to explain technical risk to engineers and leadership and to build effective working relationships with colleagues and clients.\nPreferred qualifications\nExperience with SCA and supply chain security tools such as Checkmarx, Black Duck, Snyk, or Dependency-Track, and with SBOM standards.\nExperience assessing AI/LLM-enabled applications or using AI and machine learning to improve security testing and triage.\nExperience with external attack surface management platforms and asset discovery techniques.\nFamiliarity with cloud security on AWS, Azure or GCP, including identity and access management, network security and cloud-native security services.\nExperience with policy-as-code frameworks such as OPA/Rego or Sentinel.\nKnowledge of malicious code analysis, reverse engineering and advanced exploitation techniques.\nBroad working knowledge of identity and access management, privileged access and threat and vulnerability management.\nRelevant certifications such as OSCP, OSWE, GWAPT, GMOB, eMAPT, CSSLP, CISSP, CKS or equivalent.\nExperience working in financial services or other highly regulated environments.\nWhat we offer you\nA modern, international work environment and a dedicated, motivated team.\nA broad range of professional education and personal development opportunities.\nThe chance to work on challenging, relevant issues in financial services and technology.\nA work environment built on collaboration, flexibility, and respect.\nVaried and challenging work that helps you grow your product, functional, domain, and leadership skillset.\nPrivacy Statement\nFIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.\nEEOC Statement\nFIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here\nFor positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.\nSourcing Model\nRecruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.","description_format":"text","description_chars":9658,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Software & Embedded Finance","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-11-03T20:41:18Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":27,"reasons":["conf:25","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/fis-analyst-lead-cybersecurity-2","json_url":"https://alion.io/job/fis-analyst-lead-cybersecurity-2.json","meta":{"generated_at":"2026-11-08T10:21:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22299,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4808},"rest":"https://alion.io/mcp/rest/get_company?id=4808"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffis-analyst-lead-cybersecurity-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffis-analyst-lead-cybersecurity-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffis-analyst-lead-cybersecurity-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fis-analyst-lead-cybersecurity-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffis-analyst-lead-cybersecurity-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3704815}},{"tool":"search_jobs","arguments":{"company":"fisglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3704815},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}