Junior Security Engineering, Charles River Development, Senior Associate

Who We are:

Charles River Development (CRD) is the FinTech division of State Street.  Together with State Street’s Middle and Back-office services, Charles River’s cloud-based Front Office technology forms the foundation of the State Street Alpha® Platform, the first front-to-back solution in the industry.

Industry momentum has seen CRD grow over 135% in headcount over the last 5 years, and we continue to grow. As a digital innovation leader, we invest into our solutions, processes, systems, and talent.

CRD / Alpha® Platform Engineering organization is innovating and transforming the platform by moving away from monolithic software to utilising next generation cloud-based technology that leverages Microsoft Azure, Kafka, Snowflake, etc.

Position Summary:

Be an integral part of an agile organization and contribute to the security of our products.  As a Junior Security Engineer, you will be a technical contributor to the effort of maintaining and enhancing the software security program at Charles River Development (CRD) / Alpha Platform. The security program encompasses vulnerability identification and tracking, assessment, and scoring (via CVSS), in addition conducting code reviews and run security scans. Junior security engineers will receive coaching and guidance from senior security engineers and leadership as they develop their skills and will become an integral part of an agile organization contributing to the secure development of the CRD/Alpha Platform.

Responsibilities:

• Perform security code reviews (automated/manual) and identify implementations that will lead to security vulnerabilities
• Perform security scans for open-source software, and document findings
• Conduct manual penetration tests, validate all applicable security controls, and document findings
• Work with CRD Engineers to develop vulnerability remediation action plans and drive implementation
• Identify vulnerabilities in third party libraries using security scan tools
• Identify security vulnerabilities in the release artifacts and work with engineering and product management to close out open vulnerabilities and approve releases

Education:

• B.S. degree (or foreign education equivalent) in Computer Science, Engineering, Mathematics, Physics, or other technical course of study required.

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in locations, but you may expect generous medical care, insurance and savings plans among other perks. You’ll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome the candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift program and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Discover more at StateStreet.com/careers

Qualifications/Experience:

• Demonstrated knowledge of common vulnerabilities and corresponding remediation approaches
• Current knowledge of web related attack vectors, such as XSS, SQL Injection, and Remote Code Execution
• Strong written and verbal communication skills
• Strong analytical and problem-solving skills

State Street's Speak Up Line