Sr Cyber Security Analyst

FedEx is seeking a Sr Cyber Security Analyst to support a Product Security team embedded with agile development groups and to mature security practices across the product lifecycle.

Responsibilities

• Collaborate with the manager and team members to define and mature the Product Security program long-term strategy, processes, and roadmap.
• Act as a senior security resource for agile development teams by leading sprint security discussions, driving security-focused backlog grooming, and advising developers.
• Lead security design reviews and secure code reviews for new features and architectures; identify and remediate vulnerabilities (including OWASP Top 10 and cloud-specific risk patterns).
• Facilitate and lead threat modeling sessions, producing actionable threat models, risk documentation, and mitigation plans.
• Own evaluation, configuration, and continuous tuning of security tooling in CI/CD pipelines, including SAST, DAST, and SCA; drive remediation with engineering teams.
• Own end-to-end vulnerability identification, triage, prioritization, and remediation tracking for assigned product teams.
• Apply cloud security principles and best practices to support migration to public cloud (including GCP), with guidance across secure architecture review, IAM, and workload protection.
• Provide mentorship and technical guidance to team members to grow collective capabilities.

Requirements

• 3+ years of hands-on experience in application security or product security.
• Proficiency in at least one programming language (example: Python, Java, Go, C#) with ability to read and review code for security vulnerabilities.
• Deep familiarity with common vulnerability classes including OWASP Top 10 and CWE Top 25, with demonstrated ability to identify and guide remediation.
• Hands-on experience with security tooling in CI/CD (including SAST, DAST, and SCA).
• Ability to work independently, apply sound technical judgment, and deliver results in a fast-paced, evolving environment.
• Experience contributing to or maturing a security program within a large, complex organization.
• Familiarity with GCP-native security tooling related to software supply chain and container security, such as Artifact Registry, Binary Authorization, and Cloud Build.
• Experience with cloud-native architectures and security considerations, including container security and Kubernetes (example: GKE).
• Ability to identify and automate repetitive security tasks to improve efficiency and scale security operations.
• Relevant security certifications (example: CSSLP, GWEB, GWAPT, GPEN, or equivalent).
• Familiarity with security requirements in a regulated or critical infrastructure industry.
• Four (4) years of experience in IT information security.
• General knowledge of hardware, software, and network.

Technologies

• Python, Java, Go, C#
• OWASP Top 10, CWE Top 25
• SAST, DAST, SCA
• CI/CD
• GCP, IAM
• Artifact Registry, Binary Authorization, Cloud Build
• Kubernetes, GKE
• CSSLP, GWEB, GWAPT, GPEN

Benefits

• Health, vision, and dental insurance
• retirement plans
• tuition reimbursement
• Additional pay, premiums, or bonus potential (eligibility may apply)

Hybrid Work Location

This position will be hybrid in Memphis, TN / Plano, TX / Pittsburgh, PA.

• Candidates must live within a commutable distance from Memphis, Plano, or Pittsburgh to be eligible.
• Employees are required to work at a FedEx office location up to several times per week.

Application Details

• Upload current copy of Resume (Microsoft Word or PDF format only).
• Answer job screening questionnaire by November 6, 2026.

Pay Transparency

• US pay range: $7,094.23 - $12,533.14 monthly.
• Compensation range is an estimate of current starting salary across all potential locations.
• Actual starting pay depends on experience relative to the job, market level, pay at the location, and other job-related factors.
• An employee may be eligible for additional pay, premiums, or bonus potential.

Reasonable Accommodations

• Reasonable accommodations are available for qualified individuals with disabilities throughout the application process.
• Applicants who require accommodations should contact [email protected].

E-Verify

• Federal Express Corporation participates in the Department of Homeland Security U.S. Citizenship and Immigration Services’ E-Verify program (for U.S. applicants and employees only).