Vulnerability Management - Risk and Mitigations Analyst
Who we are looking for
State Street seeks to recruit an experienced technical analyst as a Risk and Mitigations Analyst within its Global Cybersecurity Vulnerability Management team. This role involves the research and evaluation of vulnerability scenarios to form strong conclusions on risk and response disposition. Analysts will apply technical experience to validate risk and verify the response actions to that risk. This position requires collaboration skills to drive remediation activities across the enterprise, organizational skills, proven analytic skills, attention to detail and vulnerability specific technical expertise.
What you will be responsible for
• Maintain situational awareness, collaborate, influence and lead initiatives across the enterprise
• Work closely with business units to understand people, process, and technology in order to build effective vulnerability management strategies
• Analyze vulnerability assessments and remediation plans
• Synchronize with Cyber Defense Center to monitor and research information sources to assess risk to the enterprise
• Update and maintain vulnerability management runbooks and playbooks
• Maintain operational effectiveness
• Update and communicate operational metric
• Researching vulnerability risk scenarios, including Common Vulnerabilities and Exposures (CVE), tactics, techniques and procedures (TTPs) and attack chains.
What we value
• The ability to quickly but thoroughly evaluate complex scenarios and make strong recommendations.
• Knowledge and understanding of vulnerability management and remediation
• Strong organizational, multi-tasking, and prioritizing skills
• Ability to work independently and solve challenging problems
• Knowledge and interest in vulnerability related trends
• Incredible attention to detail
Education & Preferred Attributes
• 3+ years of information security experience
• Ability to consider short term and long term implications of a recommended solution
• Ability to make difficult decisions in unique situations, present recommendations under pressure to senior leadership and to cross-functional teams that may have conflicting positions
• Knowledge and understanding of structuring complex data across varied data sources
• Strong organizational, task switching, and prioritizing skills
• Ability to work independently and solve challenging problems while collaborating with stakeholders
• Advanced communication skills, both orally and written, including at a senior executive level.
• Knowledge of IT architecture and operations (computing, network, storage & cloud)
• Ability to collaborate and influence within a geographically dispersed organisation.
• Proven expertise in vulnerability scanning tools, including interpreting scan results based on detection logic.
• Strong knowledge of patch management processes, covering prioritization and deployment strategies.
• An understanding of networking fundamentals, including TCP/IP, common network protocols, firewalls, subnetting, routing, and switching.
• Experience with Linux and Windows operating systems, including system hardening and troubleshooting.
• Comprehensive understanding of common vulnerabilities and mitigation techniques to ensure secure environments.
• Familiarity with cloud and AI platforms.
• Scripting skills are a plus for automation and process optimization.
Salary Range:
$90,000 - $157,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
