Cryptographic Agility Surveillance Analyst

State Street•Princeton, NJ

3d•$70,000 - $118,750•Hybrid

About The Position

State Street is seeking a motivated and intellectually curious Cryptographic Agility Surveillance Analyst to support the development and operation of the firm's Cryptographic Agility Surveillance Program. The Cryptographic Agility Surveillance Program is a centralized capability that continuously monitors, collects, and analyzes cryptographic intelligence to help the organization understand and respond to changes in the cryptographic landscape. By identifying emerging risks such as algorithm deprecation, protocol vulnerabilities, advances in quantum computing, regulatory developments, and industry best practices, the program enables informed decision-making and supports the long-term resilience of State Street's cryptographic controls. As a Cryptographic Agility Surveillance Analyst, you will help gather, analyze, and report on cryptographic risks and trends that could impact the firm's security posture. Working closely with encryption engineers, security architects, risk partners, and technology teams, you will contribute to maintaining the effectiveness of cryptographic controls and support strategic initiatives that strengthen State Street's cyber resilience.

Requirements

A strong interest in cybersecurity, cryptography, threat intelligence, or technology risk management.
Analytical thinking and the ability to evaluate technical information from multiple sources.
Curiosity and a desire to understand how emerging technologies and industry developments impact security risk.
Strong written and verbal communication skills, with the ability to summarize technical topics clearly and concisely.
Attention to detail and a disciplined approach to research, documentation, and data analysis.
A collaborative mindset and willingness to work across multiple teams and stakeholder groups.
An eagerness to learn and develop skills in cryptography, encryption technologies, and cybersecurity operations.
Ability to manage multiple work items while maintaining high-quality deliverables.
Professionalism, integrity, and a commitment to protecting confidential information.
A continuous improvement mindset with a willingness to identify opportunities to enhance processes and operational effectiveness.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Engineering, Mathematics, or a related field, or equivalent practical experience.
One to three years of experience in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or a related field.
Foundational understanding of cybersecurity principles, encryption, authentication, and data protection concepts.
Basic knowledge of common cryptographic technologies, including TLS, PKI, certificates, hashing, and encryption.
Exposure to scripting or programming languages such as Python, PowerShell, Java, JavaScript, C#, or SQL.
Experience conducting research, data analysis, or technical investigations through academic, internship, or professional experience.

Nice To Haves

Knowledge of emerging topics such as post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management.

Responsibilities

Monitor industry, regulatory, vendor, and academic sources for emerging cryptographic threats, vulnerabilities, standards changes, and technology developments.
Track developments related to encryption algorithms, cryptographic protocols, post-quantum cryptography (PQC), key management, digital certificates, and cryptographic libraries.
Research and summarize cryptographic intelligence from multiple sources and communicate findings to technical and non-technical stakeholders.
Assist in the identification and assessment of cryptographic risks that may impact applications, infrastructure, or security controls.
Support the creation of intelligence reports, risk summaries, dashboards, metrics, and presentations for security and technology teams.
Maintain inventories, datasets, and documentation used to support cryptographic risk monitoring and analysis activities.
Participate in periodic reviews of external advisories, standards publications, and vendor security announcements.
Support investigations into newly identified cryptographic weaknesses and help document potential business impacts.
Collaborate with engineering and architecture teams to understand cryptographic implementations and support remediation planning efforts.
Contribute to evidence gathering and reporting activities that support internal governance, audit, and regulatory requirements.
Assist in maintaining processes, playbooks, and operating procedures that support the Cryptographic Agility Surveillance Program.
Collaborate with other Cyber Threat Intelligence teams to establish consistent and mature threat intelligence processes and tooling.
Ability to apply the Admiralty System to establish and manage source reliability and information credibility to enhance automated processing of expansive, continuously collected intelligence.
Continuously build knowledge of cryptographic concepts, cybersecurity trends, and emerging technologies.

Benefits

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks