[Hiring] Security Content Specialist @State Street

Role Description

State Street seeks to recruit a Security Content Specialist that will assist in creating, testing, enhancing, and documenting threat detection to validate cyber detection activity. Join us in evolving our threat management capabilities to shape a pro-active threat intelligence driven fusion model to protect State Street, its customers, and partners from the ever-evolving and sophisticated global threat actors. Remote work options will be considered for the highly skilled candidates.

• Assist onboarding of new content and detection rules, keeping an eye on existing detection and limiting duplicative content.
• Assist in prioritizing and managing bug tracking.
• Assist Security Content Engineers to test and tune threat detection use cases within the SIEM and EDR platforms.
• Monitor and maintain SIEM lookup tables and various other tables from becoming stale and dated.
• Monitor established content for metrics, efficiency, and possible retirement.
• Validate and document testing through Confluence to advance content to production.
• Document and maintain assets, scripts, and processes to test SIEM/EDR rules for reuse.
• Partner with Threat Intelligence to align detection strategy with threat model and MITRE ATT&CK framework.
• Partner with purple team, various security, risk, IT, and business professionals to validate and document threat detection goals.
• Participate in alert creation in various security controls such as EDR, IDS, Cloud, email gateways, etc. Analyze, influence, and recommend.
• Document and maintain a library of other IT groups' processes, naming conventions, and privileged accounts.
• Work through Jira tickets in an agile work environment and document processes in Confluence.

Qualifications

• An agile development life cycle.
• Thorough documentation and lifecycle.
• Experience testing, tuning, and validating threat detection alerts/reports.
• Knowledge of adversarial tactics, techniques, and procedures - ability to create detective controls.
• Knowledge of cyber threat intelligence.
• Knowledge of IT architecture and operations (computing, network, storage & cloud).
• Knowledge of security control technologies.

Requirements

• BS in Cyber Security, Information Technology, Computer Science, or relevant experience.
• +3 years in a cyber security skill role – SIEM/EDR Content Engineer, Incident Response, SOC Tier 3 Analyst, Threat Hunter, Penetration testing, etc.

Additional Requirements

• Financial Services experience a plus.
• Software development and/or scripting experience a plus: PERL, Python, Powershell, etc.
• Technical security certifications a plus – GMON, GCDA, GCIH, etc.

Company Description

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers.