Endpoint Security Product Lead

State Street•Boston, MA

7d•$120,000 - $202,500•Hybrid

About The Position

The team you will be joining is part of Defensive Engineering within Global Cyber Security, a function that is critical to the company’s cybersecurity strategy. Endpoints remain a significant attack surface for unauthorized software, malicious content, credential theft, and other cyber threats. This role will lead the team responsible for advancing endpoint security maturity through proactive controls, strong product management, measurable outcomes, and close partnership with GTS.

Requirements

Proven experience leading and developing technical or cybersecurity teams.
Strong experience with enterprise endpoint security technologies, controls, and architectures.
Experience building effective partnerships and shared product models across Cyber Security and Technology organizations.
Ability to align security requirements with platform engineering priorities and operational needs.
Experience developing security product strategies, roadmaps, technical standards, and maturity plans.
Strong understanding of endpoint threats and preventative controls across workstations, servers, browsers, and virtual environments.
Experience with application control, browser security, endpoint hardening, attack surface reduction, and endpoint resilience.
Knowledge of frameworks and practices such as NIST CSF, CIS Controls, CIS Benchmarks, MITRE ATT&CK, and Zero Trust.
Experience defining meaningful metrics, measuring control effectiveness, and driving remediation of security gaps.
Strong leadership, product management, communication, and stakeholder-management skills.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
8+ years of experience in cybersecurity, endpoint security, security engineering, security architecture, or security product management.
3+ years of experience leading technical or cybersecurity teams.
Experience implementing or maturing enterprise security platforms and controls at scale.
Experience driving security control adoption across large and complex endpoint environments.
Experience managing product roadmaps, vendor relationships, and security platform lifecycles.
Ability to translate threats, control gaps, and regulatory requirements into actionable product priorities.
Ability to influence and drive shared outcomes across GCS, GTS, Infrastructure, Cloud, Risk, and Engineering organizations.
Strong focus on team development, collaboration, accountability, and continuous improvement.

Nice To Haves

Experience working in financial services or another highly regulated industry preferred.
Relevant certifications such as CISSP, CCSP, GIAC, or equivalent preferred.

Responsibilities

Lead, develop, and manage a team of endpoint product security professionals, setting clear priorities, expectations, and accountability.
Define and drive the enterprise endpoint security strategy, product roadmap, and maturity plan.
Build a shared product operating model with GTS Endpoint Platform leaders that aligns priorities, roadmaps, ownership, and success measures.
Treat the GTS Endpoint Platform organization as a key customer and partner, ensuring security capabilities are practical, scalable, and embedded within endpoint platform services.
Establish shared outcomes and metrics across GCS and GTS for endpoint security coverage, policy enforcement, control effectiveness, exceptions, and risk reduction.
Drive the adoption and maturity of capabilities such as application control, browser security, endpoint hardening, attack surface reduction, and endpoint resilience.
Establish endpoint security requirements, configuration standards, policy baselines, and secure-by-design practices.
Assess control coverage and effectiveness, identify security gaps, and prioritize improvements based on threat, risk, and business impact.
Lead security product evaluations, proof-of-concepts, vendor assessments, and platform lifecycle planning.
Collaborate with the Cyber Defense Center to improve endpoint telemetry, visibility, investigation, and incident response capabilities.
Partner with Infrastructure, Desktop Engineering, Server, Cloud, and other technology teams to embed security throughout the endpoint lifecycle.
Maintain product documentation, control evidence, and supporting materials for risk, audit, and regulatory requirements.
Serve as the product owner and senior subject matter expert for enterprise endpoint security capabilities.

Benefits

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks