Cyber Exercise Program Lead

Who we are looking for

The Cyber Exercise Program Lead will be a member of the Offensive Security team within the Global Cyber Security (GCS) group. The Cyber Exercise Program Lead will develop, execute, and evaluate exercises and workshops that address the priorities established by executive leadership. These exercises provide the organization the opportunity to shape planning, assess and validate capabilities, and address areas for improvement. This person must be comfortable leading their security initiatives across a large, diverse, and complex global financial environment.

What you will be responsible for

• · Develop Cyber Exercise Program procedures that align with State Street Policies and Standards and that leverage U.S. government Homeland Security Exercise and Evaluation Program (HSEEP) guidance.
• · Develop, execute and evaluate approximately multiple cyber workshops and exercises annually to identify opportunities for improvement to the enterprise’s security framework.
• · Work with other teams to identify opportunities for improvement and recommend ways to improve security capabilities.
• · Design threat scenarios based on threat intelligence, and State Street’s IT systems, procedures and teams.
• · Develop all materials required for exercises and workshops, including: executive requirements memorandum, situational manuals, participant invitations, facilitation materials, after action reports, and remediation plans.
• · Thoroughly document all phases of exercises and workshops, including: scope, plan, findings & recommendations, and remediation plans to satisfy audit requirements.
• · Support the creation of hardening guidance, detection rules, security alerts and other security solutions for addressing opportunities for improvement.
• · Assist with resolution of regulatory findings, and implementation of remediation plans.

What we value

These skills will help you succeed in this role

• · Developed, executed and evaluated multiple cyber security exercises of varying complexity and scope.
• · Knowledge of relevant frameworks and concepts, including: MITRE ATT&CK & D3FEND, the diamond model, the intelligence cycle, U.S. Department of Defense Joint Exercise Life Cycle (JELC), U.S. Department of Homeland Security Homeland Security Exercise and Evaluation Program (HSEEP), and U.S. Cybersecurity & Infrastructure Security Agency (CISA) Tabletop Exercise Packages (CTEPs).
• · Extensive experience writing defensible exercise documents that withstand audit scrutiny and have driven organizational improvement.
• · Strong organizational, task switching, and prioritizing skills.
• · Ability to work independently and solve challenging problems with stakeholders.
• · Knowledge of common vulnerabilities and exposures (CVE) programs.
• · Attention to detail
• · Collaboration and influencing
• · Working professionally with confidential information
• · Presentation skills, both orally and written
• · Professional approach to communicating complex and contentious ideas and solutions in simple terms to a broad audience.

· Education and Preferred Qualifications

• Bachelor's Degree in a relevant subject, including business, information technology, cybersecurity, engineering, and communications.
• · 3+ years of Cyber Event Coordination experience or equivalent
• · 3+ years of developing, executing and evaluating exercises.
• · Experience in a financial services organization.
• · Experience in cybersecurity operations.
• · Training and certification in planning and executing exercises.
• · Advanced Microsoft Office skills.

Are you the right candidate? Yes!

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don’t necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.

Why this role is important to us

Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.

We offer a collaborative environment where technology skills and innovation are valued in a global organization. We’re looking for top technical talent to join our team and deliver creative technology solutions that help us bec