Head of External Attack Surface Management

STATE STREET CORPORATION; Kilkenny; On-site; EUR 90,000 - 130,000; Full time

Job summary

State Street Corporation in Kilkenny, Ireland, is seeking an External Attack Surface Management Analyst to lead our perimeter assurance program within the Global Cybersecurity organization. The role oversees live inventory of internet-facing assets and coordinates remediation with Cyber Defense Centre and Vulnerability Management teams.

You will drive continuous scanning, triage critical findings, document processes, and engage with external researchers on bug bounty activities.

Qualifications

• Bachelor’s in Cyber Security, Information Technology, Computer Science or relevant experience/certifications.
• CISSP, CISM, CIPM, OSCP, GCIH or applicable certification is a plus.
• Financial services regulatory/audit experience is a plus.
• Experience in cyber security SOC / IT operations.

Responsibilities

• Own the persistent External Attack Surface Management (EASM) capability across the corporate estate.
• Lead continuous external scanning and triage of critical findings to remediation.
• Document perimeter assurance processes and evidence of closure.
• Coordinate disclosure and bug bounty programs with internal/external teams.
• Represent perimeter assurance in meetings with leadership and partners.
• Evaluate and lifecycle-manage EASM tooling; conduct build-vs-buy analysis.
• Mentor Cyber Fusion Center personnel and promote knowledge sharing.

Skills

EASM Operations

Vulnerability Management

Incident triage

Technical communication

Security governance

Education

Bachelor’s in Cyber Security or related field

Tools

SIEM

EDR/EPP

Web Proxy/Content filtering

DNS

Cloud exposure monitoring

Job description

State Street Corporation in Kilkenny, Ireland, is seeking an External Attack Surface Management Analyst to lead our perimeter assurance program within the Global Cybersecurity organization. The role oversees live inventory of internet-facing assets and coordinates remediation with Cyber Defense Centre and Vulnerability Management teams.

You will drive continuous scanning, triage critical findings, document processes, and engage with external researchers on bug bounty activities.