Cyber Advanced Threat Senior Analyst VP

Who we are looking for

State Street seeks to recruit a Senior Analyst Vice President to support the Fusion and Security Operations Advanced Threat Operational Reporting and Remediation Analysis Program. This is a very technical role in which the employee will analyze red team, pen testing, and other Advanced Threat related findings and perform immediate risk reduction actions, root cause analysis, and risk and controls reporting to the respective risk committees and the Head of Fusion and Security Operations.

What you will be responsible for

As a Senior Analyst VP, you will assess the risk of Advanced Threat findings, identify areas for immediate risk reduction, produce risk-based reporting, and validate remediation activities of Advanced Threat findings. You will help translate the findings into business impact and risk and identify opportunities to immediately reduce the risks identified. In addition, you will contribute to Risk Committee reporting for the Advanced Threat and Fusion & Security Operations portfolio, contribute to other assurance activity such as reporting and measurement of control effectiveness, and reporting for Key Performance Indicators / Key Risk Indicators. Key responsibilities include:  

• Trace the attack path of a penetration test and analyze the exploited vulnerabilities to understand the key exploitation points along the kill chain
• Conduct root cause analysis to determine technical, procedural, and behavioral gaps or vulnerabilities uncovered during testing
• Discern between the highest risk vulnerabilities identified during testing and articulate the impact to the underlying system or infrastructure
• Identify the most critical remediation activities system owners or business process owners can take to disrupt the kill chain used in penetration tests
• Document results of the analysis in the team’s workflow tool
• Identify key stakeholders for remediation and assign findings accordingly

Reports to: MD, Head of Fusion Advanced Threat Operational Reporting and Remediation

What we value

These skills will help you succeed in this role       

• 5 or more years in a security engineering role, vulnerability assessment/management role, or penetration testing role  
• Ability to communicate technical topics surrounding vulnerabilities to a broad audience with varying technical proficiencies and at varying levels of management
• Excellent interpersonal and communication skills (written and verbal)
• Excellent problem-solving abilities and organizational/time management skills.
• Strong attention to detail and willingness to "roll up sleeves"
• Ability to work independently as well as collaboratively across silos 
• Intellectually curious and willing to invest time in researching areas outside current knowledge base/skill set

Education & Preferred Qualifications

• Bachelor’s degree with 5 years relevant experience
• Expertise in network security architecture and application security 
• Understanding of threat actor tactics, techniques, and procedures

Additional requirements

• Previous experience in banking industry a plus
• Previous experience with producing evidence in support of regulatory inquiries a plus