Who we are looking for

The Advanced Defensive Architecture Engineer is part of a team of highly skilled, trusted, and dynamic security architects and engineers tasked with securing the firm's most critical network environments.

This team personally advises the CISO and Cyber Fusion Center SVP on threats to State Street’s critical business environments from Nation States, Cyber Criminals and others. This team designs, implements, and monitors the control posture across high risk and contested domains, in partnership with Cyber Threat Intelligence. 

Reports to: Advanced Defensive Architecture Managing Director

What you will be responsible for

Execution

• Executing the vision, strategy, and mission of the Advanced Defensive Architecture organization.

• Work under tight deadlines to handle multiple, detail-oriented tasks.

• Develop and maintain Advanced Cyber Threat & Forensic related policies, standards, procedures, and guidelines.

Advancing State Street's Security Stack

• Assist with the selection, implementation, and improved use of advanced monitoring tools.

• Research and implement technology, code, and other configurations for threat detection and response, in cloud and on-premises environments.

• Build on and improve logging and monitoring infrastructure in collaboration with Infrastructure, Engineering, and Operations teams.

• Use automation to dramatically improve detection and response speed and effectiveness.

Cyber Operations

• Respond to threats in real time, through diagnosis, communication, and remediation.

• Execute response efforts against emerging Indicators of Compromise (IoC) and conduct research of new TTPs using all-sources.

• Develop Advanced Defensive Architecture metrics, and automations to implement those metrics.

Strategic Engagement

• Brief State Street’s executive management team, senior leaders, and information security professionals on cyber threat trends, emerging challenges and relevant insights that relate to State Street’s businesses.

• Support the development of defense in depth protections by working with third-party providers, including working with threat intelligence, threat analysis, and threat remediation.

• Actively liaise with the cybersecurity community to include industry associations, peer financial institutions, and information sharing communities.

• Closely coordinate with, and support, other State Street information security teams such as the Cyber Security Fusion Centers, Security Operations Centers, Vulnerability Assessment, Investigations, Cyber “Hunt” Teams, Big Data Analysis, Crisis Management, and Exercises.

• Engaging with audit, compliance, and regulatory bodies globally.

• Advise and support information and threat hunt initiatives with peers, governments, and sharing organizations world-wide.

Desired Outcomes

• Reduce State Street security risks by leveraging controls and minimizing weaknesses.

• Support the Managing Director to understand, manage and drive of information security risks on behalf of executive leadership.

• Recommend changes in security policies and practices in accordance with changes in local or federal law.

​What we value

These skills and traits will help you succeed in this role

• 8 years or more experience in Security Architecture, Advanced Threat Hunting, data analytic, or investigative teams with at least 1 year in artificial intelligence and security tooling preferred.

• Proven ability to successfully work remotely, travel when needed, and operate across multiple geographic time zones.

• Experience in taking Threat Hunting related requirements and turning them into final products or presentations on time and on point.

• Experience in developing strategies and systems for cross-functional detection and elimination of fraudulent behavior.

• Ability to perform forensics to validate security findings and experience using EDR and other forensic tools.

• Experience with SIEM, Network Security Monitoring tools, and Endpoint Detection & Response.

• Oversee the production of investigative reports and analysis that pertinent to evidence obtained during investigations.

• Strong knowledge of cyber security threat actors particularly their tactics, techniques, procedures, tradecraft, and noteworthy attacks.

• Exceptional communications skills (oral and written) with a history of successfully engaging with groups such as Boards of Directors, executive management teams, and senior busi