EASM / Persistent Perimeter Assurance Analyst, Vice President

State Street•Quincy, MA

7d•$125,000 - $215,000•Onsite

About The Position

State Street is seeking an External Attack Surface Management (EASM) / Persistent Perimeter Assurance Analyst for its Global Cybersecurity organization within the Cyber Fusion Center. The Perimeter Assurance team leads the persistent discovery, monitoring, and reduction of State Street’s internet-facing attack surface. The analyst will be an operational leader responsible for the smooth execution of the perimeter assurance mission and will work across teams, including the Cyber Defense Centre and Vulnerability Management, to assess, triage, and remediate external exposures across corporate networks, subsidiaries, and affiliates. The role owns State Street’s persistent EASM capability, maintains a live inventory of internet-facing assets, and operates continuous external scanning. It also supports coordinated disclosure and the bug bounty program, maintains process documentation, evaluates perimeter-scanning tools, represents the function to stakeholders, and helps develop the team’s capabilities through training and knowledge sharing. The Cyber Fusion Center detects and responds to cyber threats 24/7, 365. The role is fully on-site at a State Street office in Quincy, Massachusetts; Boston, Massachusetts; or Kilkenny, Ireland.

Requirements

Experience working in a cybersecurity SOC or IT operations function.
Hands-on experience operating EASM and/or external vulnerability-scanning platforms at enterprise scale.
Proven ability to triage, prioritize, and drive remediation of critical and high-severity external vulnerabilities against defined SLAs.
Working knowledge of bug bounty or responsible-disclosure operations and coordination with external researchers.
Ability to think critically, analyze data, and synthesize it for decision-making.
Exceptional written and verbal communication skills, including the ability to translate technical exposure into executive- and board-level narratives.
Knowledge of adversarial tactics, techniques, and procedures (TTPs) and industry-standard frameworks such as NIST and MITRE ATT&CK.
Knowledge of IT architecture and operations, including computing, network, storage, and cloud, as well as edge and zero-trust concepts.
Strong working knowledge of security technologies, including SIEM, EDR/EPP, AV, ID/PS, HIPS, web proxy/content filtering, AD, PKI, and DNS.
Understanding of RACI-based governance, escalation design, and control ownership within a regulated financial-services environment.
Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or relevant experience/certifications.

Nice To Haves

CISSP, CISM, CIPM, OSCP, GCIH, or an applicable security certification.
Financial Services experience.
Regulatory or audit experience.

Responsibilities

Own the persistent External Attack Surface Management (EASM) capability and maintain a live inventory of internet-facing assets, domains, certificates, cloud exposure, and shadow IT across the corporate estate, subsidiaries, and affiliates.
Operate continuous EASM and external scanning across the perimeter, and partner in structured triage of critical and high-severity findings through remediation and closure.
Maintain and create documentation for perimeter assurance and exposure-management processes, covering discovery, triage, validation, remediation, and evidence of closure.
Assist with the coordinated disclosure and bug bounty program, serving as the operational bridge between external researchers and internal remediation owners.
Represent and articulate the perimeter assurance position and interests in meetings and presentations with partners, and for metrics, audits, and leadership; conduct monthly service reviews with evidence of SLA review and challenge.
Lead evaluation and lifecycle management of EASM and perimeter-scanning tools, including build-versus-buy assessments of new and not-yet-purchased capabilities against a weighted scorecard.
Support a high-performance culture and continuously enhance perimeter assurance and exposure-management processes.
Train and mentor Cyber Fusion Center personnel and promote knowledge sharing with teams across the global Fusion Center.

Benefits

401(k) retirement savings plan with company match.
Insurance coverage including basic life, medical, dental, vision, and long-term disability, with other optional additional coverages.
Paid time off including vacation, sick leave, short-term disability, and family-care responsibilities.
Access to an Employee Assistance Program.
Eligibility for annual performance-based incentive awards, excluding certain sales roles subject to sales incentive plans.
Eligibility for certain tax-advantaged savings plans.
Inclusive development opportunities.
Flexible work-life support.
Paid volunteer days.
Employee networks.