Who we are looking for
The Cyber Exercise Program Lead will be a member of the Offensive Security team within the Global Cyber Security (GCS) group. The Cyber Exercise Program Lead will develop, execute, and evaluate exercises and workshops that address the priorities established by executive leadership. These exercises provide the organization the opportunity to shape planning, assess and validate capabilities, and address areas for improvement. This person must be comfortable leading their security initiatives across a large, diverse, and complex global financial environment.
What you will be responsible for
- • Develop Cyber Exercise Program procedures that align with State Street Policies and Standards and that leverage U.S. government Homeland Security Exercise and Evaluation Program (HSEEP) guidance.
- • Develop, execute and evaluate approximately multiple cyber workshops and exercises annually to identify opportunities for improvement to the enterprise's security framework.
- • Work with other teams to identify opportunities for improvement and recommend ways to improve security capabilities.
- • Design threat scenarios based on threat intelligence, and State Street's IT systems, procedures and teams.
- • Develop all materials required for exercises and workshops, including: executive requirements memorandum, situational manuals, participant invitations, facilitation materials, after action reports, and remediation plans.
- • Thoroughly document all phases of exercises and workshops, including: scope, plan, findings & recommendations, and remediation plans to satisfy audit requirements.
- • Support the creation of hardening guidance, detection rules, security alerts and other security solutions for addressing opportunities for improvement.
- • Assist with resolution of regulatory findings, and implementation of remediation plans.
Want more jobs like this?
Get jobs in Quincy, MA delivered to your inbox every week.
What we value
These skills will help you succeed in this role
- • Developed, executed and evaluated multiple cyber security exercises of varying complexity and scope.
- • Knowledge of relevant frameworks and concepts, including: MITRE ATT&CK & D3FEND, the diamond model, the intelligence cycle, U.S. Department of Defense Joint Exercise Life Cycle (JELC), U.S. Department of Homeland Security Homeland Security Exercise and Evaluation Program (HSEEP), and U.S. Cybersecurity & Infrastructure Security Agency (CISA) Tabletop Exercise Packages (CTEPs).
- • Extensive experience writing defensible exercise documents that withstand audit scrutiny and have driven organizational improvement.
- • Strong organizational, task switching, and prioritizing skills.
- • Ability to work independently and solve challenging problems with stakeholders.
- • Knowledge of common vulnerabilities and exposures (CVE) programs.
- • Attention to detail
- • Collaboration and influencing
- • Working professionally with confidential information
- • Presentation skills, both orally and written
- • Professional approach to communicating complex and contentious ideas and solutions in simple terms to a broad audience.
• Education and Preferred Qualifications
- Bachelor's Degree in a relevant subject, including business, information technology, cybersecurity, engineering, and communications.
- • 3+ years of Cyber Event Coordination experience or equivalent
- • 3+ years of developing, executing and evaluating exercises.
- • Experience in a financial services organization.
- • Experience in cybersecurity operations.
- • Training and certification in planning and executing exercises.
- • Advanced Microsoft Office skills.
Are you the right candidate? Yes!
We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don't necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.
Why this role is important to us
Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We're driving the company's digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.
We offer a collaborative environment where technology skills and innovation are valued in a global organization. We're looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.
Join us if you want to grow your technical skills, solve real problems and make your mark on our industry.
About State Street
What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we're making our mark on the financial services industry. For more than two centuries, we've been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.
Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You'll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.
Inclusion, Diversity and Social Responsibility. We truly believe our employees' diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.
State Street is an equal opportunity and affirmative action employer.
Salary Range:
$120,000 - $187,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
State Street's Speak Up Line