Security Content Engineer

Who we are looking for
State Street seeks to recruit a Security Content Engineer that will create, test, enhance, and document threat detection capabilities to determine the presence of certain cyber activity. Join us in evolving our threat management capabilities to shape a pro-active intelligence driven fusion model to protect State Street, its customers and partners from the ever evolving and sophisticated global threat actors. Remote work options will be considered for the highly skilled candidates.

What you will be responsible for
As Security Content Engineer you will

• Develop and implement new detection content for both cloud-based and on-prem systems while ensuring a high level of fidelity.
• Determine the best method for achieving detection content objectives to ensure efficiency and avoid duplication.
• Triage, prioritize, and take appropriate action to address requests for detection content corrections and/or ehancements.
• Test and tune threat detection use cases within the Security Incident and Event Management (SIEM), Endpoint Detection and Response (EDR) and/or other security platforms.
• Monitor and maintain SIEM look up tables and various other tables from becoming stale and dated.
• Monitor established content metrics, identify opportunities to increase efficiency, fidelity, and/or possible retirement.
• Validate and document content requirements, search criteria, test cases, and other development lifecycle aspects through use of appropriate documentation libraries and development tracking tools.
• Document and maintain assets, scripts and processes to test SIEM/EDR rules for reuse.
• Partner with other Fusion Center teams to align detection strategy with threat model and MITRE ATT&CK framework.
• Partner with purple team, various security, risk, IT and business professionals to validate and document threat detection goals.
• Provide guidance in alert creation among various security controls such as EDR, IDS, Cloud, email gateways, etc. Analyze, influence, and recommend.
• Collaborate with various teams to learn, document, and maintain a library of various IT processes, naming conventions, assets, configurations, and other considerations that can be leveraged to improve security capabilities across the organization.

What we value
These skills will help you succeed in this role

• An agile development lifecycle and methodology.
• Articulate and thorough documentation and lifecycle.
• Methodical approach to test, tune and validate threat detection alerts/reports.
• Knowledge of adversarial tactics, techniques, and procedures - ability to create detective controls.
• Knowledge of cyber threat intelligence.
• Knowledge of IT architecture and operations (computing, network, storage & cloud).
• Knowledge of security control technologies.

Education & Preferred Qualifications

• BS in Cyber Security, Information Technology, Computer Science or relevant experience
• +6 years in a cyber security skill role - SIEM/EDR Content Engineer, Incident Response, SOC Tier 3 Analyst, Threat Hunter, Penetration testing, etc.

Additional requirements

• Financial Services experience a plus.
• Software development and/or scripting experience a plus: RegEx, PERL, Python, Powershell, etc.
• Technical security certifications a plus - GMON, GCDA, GCIH, etc.

Why this role is important to us
Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We're driving the company's digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.

We offer a collaborative environment where technology skills and innovation are valued in a global organization. We're looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.

Join us if you want to grow your technical skills, solve real problems and make your mark on our industry.

About State Street
What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation we're making our mark on the financial services industry. For more than two centuries, we've been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.
Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in locations, but you may expect generous medical care, insurance and savings plans among other perks. You'll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.
Inclusion, Diversity and Social Responsibility. We truly believe our employees' diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome the candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift program and access to employee networks that help you stay connected to what matters to you.
State Street is an equal opportunity and affirmative action employer.
Discover more at StateStreet.com/careers