VP, External Attack Surface & Perimeter Assurance

STATE STREET CORPORATION; Kilkenny; On-site; EUR 90,000 - 130,000; Full time

Job summary

State Street seeks an External Attack Surface Management (EASM) Analyst for its Global Cybersecurity organization, based on-site in Kilkenny, Ireland. You will own the persistent perimeter program, inventory internet-facing assets, domains, certificates, and cloud exposure across the corporate estate and subsidiaries.

You will triage and drive remediation of high-risk findings, contribute to documentation, coordinate with researchers in bug bounty programs, and present metrics to leadership.

Qualifications

• Experience operating EASM/external vulnerability scanning at enterprise scale.
• Ability to triage, prioritize and drive remediation of external vulnerabilities against SLAs.
• Familiarity with bug bounty / responsible disclosure operations.
• Strong written and verbal communication skills; translate exposure for executives.
• Knowledge of NIST / MITRE ATT&CK frameworks.

Responsibilities

• Own the persistent External Attack Surface Management (EASM) capability and inventory internet-facing assets.
• Lead triage and remediation through to closure with cross-functional teams.
• Document perimeter assurance processes and evidence of closure.
• Coordinate disclosure with external researchers and internal owners.
• Present metrics and SLA evidence in leadership reviews.
• Evaluate EASM tooling and build-vs-buy decisions.

Skills

Cybersecurity

SOC/IT operations

EASM

Vulnerability scanning

Bug bounty coordination

Executive communication

Adversarial TTPs knowledge

IT architecture & cloud

SIEM

EDR/EPP

DNS/PKI

Zero-trust concepts

Education

Bachelor’s in Cyber Security or IT related

Certifications: CISSP, CISM, CIPM, OSCP, GCIH

Tools

SIEM

EDR

AV

ID/PS

HIPS

Web Proxy/Content filtering

AD

PKI

DNS

Job description

State Street seeks an External Attack Surface Management (EASM) Analyst for its Global Cybersecurity organization, based on-site in Kilkenny, Ireland. You will own the persistent perimeter program, inventory internet-facing assets, domains, certificates, and cloud exposure across the corporate estate and subsidiaries.

You will triage and drive remediation of high-risk findings, contribute to documentation, coordinate with researchers in bug bounty programs, and present metrics to leadership.