Lead Cyber/SOC Analyst (a/k/a Cybersecurity)

State Street Corporation - Boston, MA

Full-time - Senior

Remote - Boston, MA

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Lead Cyber/SOC Analyst at State Street Bank and Trust Company will oversee the triage, analysis, and response to cyber-attacks within the Fusion Center, which operates 24/7 to protect the enterprise from various cyber threats. This role involves leading incident response processes, authoring reports, managing cyber exercises, and enhancing the incident response framework while mentoring SOC personnel.

Responsibilities

• Lead the cyber incident response process for high severity or long running incidents.
• Author incident status updates and closure reports to leadership.
• Produce post mortem reports to identify lessons learned and recommendations.
• Continuously prepare for incidents by updating and maintaining incident response plans, playbooks, and procedures.
• Manage and participate in cyber-related exercises such as table tops and cyber ranges.
• Measure the effectiveness and performance of the incident response process through KRI and KPI metrics.
• Identify methods to continuously enhance the incident response process.
• Work closely with the SOC to drive development and collaboration.
• Train and mentor SOC personnel.
• Create an environment that drives knowledge sharing with teams across the Fusion Center.
• Help develop the 24/7 Fusion Center mindset and follow the sun model.

Requirements

• Master's degree or its equivalent in Cyber Security, Information Technology, Computer Science or related field plus 4 years in a cyber security SOC/IR role.
• Alternatively, a Bachelor's degree or its equivalent in Cyber Security, Information Technology, Computer Science or related field plus 6 years in a cyber security SOC/IR role.
• CISSP, CEH, OSCP, OSCE or GCIH or applicable certification in Security field.
• Experience with investigating & managing major/complex cyber incidents end to end.
• Experience working/leading in a SOC or Fusion Center.
• Strong operating systems administration skills (Windows, Linux, Mac).
• Strong malware analysis expertise.
• Experience in performing memory forensics.
• Knowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck).
• Knowledge of IT architecture and operations (computing, network, storage & cloud).
• Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNS.

Benefits

• Full-time telecommuting from within the United States permitted pursuant to Company policy.
• Paid volunteer days.
• Access to employee networks for personal and professional connection.