Threat Assurance Analyst

State Street • Quincy, MA

3d

About The Position

We are looking for a Threat Assurance Analyst (AVP) to join the Assurance Analysis team – a new team working at the intersection of threat intelligence, testing and controls. This role will be focused on interacting with internal and external testing partners and control owners as we source, transform and interpret data from our stakeholders to understand enterprise posture and provide assurance insights to our cyber partners and leadership. The ideal candidate has a diverse cyber background with previous experience in – or a genuine appreciation for – cyber data analytics and science. They are expert enough to interpret the outputs of partner teams, yet independent enough to produce their own analysis. This individual will communicate assurance from the threat perspective – translating policies into threat impact and defensive coverage – and will work with a diverse range of teams, tailoring communication to each audience’s level of technical knowledge. This role is one meant to build upon the foundation already established by the team to enhance the coverage and understanding across the different data domains. We are a threat-led team, utilizing our curated data to assist in threat-informed testing and defenses. Threat intelligence is our foundation and an understanding of relevant frameworks like MITRE ATT&CK is a must.

Requirements

• Familiarity with the MITRE ATT&CK framework
• Data analytics experience with proven application in the cyber field.
• Experience with Python, SQL and Power BI.
• Strong communication skills, with the ability to tailor technical detail to varied audiences
• A disciplined approach to documentation, capable of producing clear, reusable records that support tracking, auditability and governance.

Nice To Haves

• Bachelor’s degree in a related field
• 3–5 years’ experience in a cyber security role.
• Exposure to penetration testing and technical controls.
• Hands-on or oversight experience with technical control platforms and technologies (e.g. SIEM, EDR, DLP, Proxy).
• Industry certification (e.g. CompTIA, SANS/GIAC) preferred but not required
• Understanding of cyber threat intelligence and threat-informed defense concepts

Responsibilities

• Engage technical control owners to source their mapped control data, translating and mapping their policies to industry frameworks (e.g. MITRE ATT&CK).
• Engage testing and partner teams (Pen Test, Red Teams, Purple Teams) to accurately define and map testing results to internal data models
• Interpret testing results alongside relevant defensive strengths and shortfalls in controls
• Work with Blue Team partners (SOC, Detection Engineers) to gain additional data – testing outcome enrichment and control insights
• Maintain dashboards and data models that inform stakeholders of assurance activities and enterprise posture.
• Design and apply AI-assisted workflows to accelerate analysis while validating outputs to ensure data accuracy and integrity
• Assist in feature development, working with product and data teams to mature assurance tooling and processes.
• Communicate assurance from the threat perspective, translating policies into threat impact and defensive coverage for technical and leadership audiences alike.
• Produce and maintain clear documentation of data sources, schema definitions, mapping logic, transformations and analytical decisions to ensure work is transparent, repeatable and auditable.
• Keep a finger on the pulse of industry framework changes to help partner teams stay unified and up to date.

Benefits

• our retirement savings plan (401K) with company match
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• eligibility for certain tax advantaged savings plans

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level