Lead Cyber/SOC Analyst (a/k/a Cybersecurity)(State Street Bank and Trust Company; Boston, MA): Will lead the triage, analysis and response to cyber-attacks. State Street's Fusion Center is responsible for detecting and responding to various cyber threats 24/7 365 days a year, that are directed towards the enterprise. Specific duties of the position include: Leading the cyber incident response process to ensure timely triage, analysis, containment, eradication and return to service for high severity or long running incidents; Author incident status updates and closure reports to leadership; Produce post mortem reports to identify lessons learned and recommendations; Continuously prepare for incidents by updating and maintaining incident response plans, playbooks and procedures; Manage and participate in cyber related exercises such as table tops and cyber ranges; Measure the effectiveness and performance of the incident response process through KRI and KPI metrics; Identify methods to continuously enhance the incident response process; Work closely with the SOC to drive development and collaboration; Train and Mentor SOC personnel; Creating an environment which drives knowledge sharing with teams across the Fusion Center; and Help developing the 24/7 Fusion Center mindset and follow the sun model. 10% regional and international travel required. Full-time telecommuting from within the United States permitted pursuant to Company policy.

Minimum requirements: Master’s degree or its equivalent in Cyber Security, Information Technology, Computer Science or related field; plus 4 years in a cyber security SOC/IR role such as Incident Response, SOC Tier 3/Lead Analyst, Threat Hunter, Penetration testing, or related. Alternatively, will accept a, Bachelor’s degree or its equivalent in Cyber Security, Information Technology, Computer Science or related field; plus 6 years in a cyber security SOC/IR role such as Incident Response, SOC Tier 3/Lead Analyst, Threat Hunter, Penetration testing, or related.

Must have: CISSP, CEH, OSCP, OSCE or GCIH or applicable certification in Security field; Experience with investigating & managing major/complex cyber incidents end to end; Experience working/leading in a SOC or Fusion Center; Strong operating systems administration skills (Windows, Linux, Mac); Strong malware analysis expertise; Experience in performing memory forensics; Knowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck); Knowledge of IT architecture and operations (computing, network, storage & cloud); and Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNS. (Unless otherwise indicated, State Street is seeking the stated ability in the skills listed above with no specific number of years or amount of experience required. All experience can be gained concurrently.)

To apply to this position, you must click the “Apply” button on this page and complete the online application.  An EOE.

#LI-DNI

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

State Street's Speak Up Line