Application Security AI Engineer

Fidelity • Merrimack, NH

3h • Hybrid

About The Position

Launch Your Technology Career at Fidelity Investments Are you ready to start your technology career with Fidelity Investments? Join our dynamic technology team and contribute to projects that make a real impact. As a full-time associate, you will work on innovative initiatives, gain hands-on experience, and collaborate with industry experts, all while building a foundation for a successful career in tech. THE ROLE Product & App Security: Join Fidelity’s security team that finds and fixes vulnerabilities in web apps and APIs before attackers do. Bring your knowledge of penetration testing and your skill with use of AI technology to enable our penetration testing capability to scale. Ultimately this will enable Fidelity to protect the livelihoods of our customer in a more effective efficient manner. WHY FIDELITY Contribute to projects that protect millions of customers and enable critical technology transformations. Work alongside experienced professionals who will guide your development. Gain hands-on experience in cybersecurity, automation, and enterprise-scale technology solutions. Build a strong foundation for long-term success in Fidelity’s technology organization Note : The role does not offer visa sponsorship Certifications: Category: Information Technology Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles. Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Requirements

• Degree in Computer Science, Cybersecurity or related field
• Understanding of web application security, penetration testing, SSDLC or DevSecOps fundamentals
• Knowledge of the OWASP Top 10
• Experience with offensive testing tools such as BurpSuite and/or GitHub Advanced Security
• Experience with identifying vulnerabilities in web applications, even if only in intentionally vulnerable systems cush as OWASP WebGoat or Capture-The-Flag systems
• Familiarity with APIs and automation concepts
• Foundational knowledge of LLMs/ML and agentic AI patterns for security automation
• Working knowledge of AI technologies (including use of CoPilot of Claude, MCP server, experimentation with multi agent AI Systems)
• Strong problem solving, documentation, and collaboration skills

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level