Cyber Defense Center, Lead Analyst, AVP

State Street; Singapore; On-site; SGD 140,000 - 200,000; Full time

Job summary

State Street seeks a Lead Cyber Security Operations Center (SOC) analyst to support a 24/7 global security program in Singapore. You will lead incident response, triage, and containment for high-severity cyber events, while coordinating with cross-functional teams within the Fusion Center.

You will mentor SOC staff, develop playbooks, and drive continuous improvement through exercises and metrics, ensuring rapid recovery and risk reduction.

Qualifications

• Experience leading end-to-end cyber incidents in a SOC or Fusion Center.
• Proven ability to manage high-severity incidents and run 24/7 operations.
• Strong OS knowledge across Windows, Linux, Mac.

Responsibilities

• Lead the cyber incident response process for triage, containment, eradication, and recovery.
• Publish incident status updates and leadership reports.
• Produce postmortem reports with lessons learned and recommendations.
• Maintain and update incident response playbooks and procedures.
• Coordinate cyber exercises and training for SOC personnel.
• Measure and improve the incident response process using KPIs.

Skills

Incident Response

SOC Lead

Threat Hunter

Memory Forensics

Malware Analysis

Education

Master's in Cyber Security

CISSP

Tools

SIEM

EDR

IDS/IPS

DNS

PKI

Job description

What we do. State Street is one of the largest custodian banks, asset managers, and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Who Are We Looking For

State Street seeks to recruit a Lead Cyber Security Operations Center (SOC) analyst that will assist in the detection, triage, analysis and response to cyber-attacks. The analyst will join our SOC team which will run a 24/7 coverage, 365 days a year model, with a partner team in Singapore.

The SOC team is responsible for analyzing events from multiple sources across a large enterprise network. The SOC will partner with multiple teams in our Cyber Fusion Center including but not limited to Advanced Threat, Cyber Threat Intelligence, & Red/Purple teams.

Join us in evolving our response capabilities to protect State Street, its customers and partners from ever evolving and sophisticated threat actors. State Street’s Fusion Center is responsible for detecting and responding to various cyber threats 24/7 365 days a year, that are directed towards the enterprise.

This role will be Monday - Friday and will be on-site in State Street's office in Singapore.

What Will You Be Responsible For

• Leading the cyber incident response process to ensure timely triage, analysis, containment, eradication, and return to service for high severity or long running incidents.
• Author incident status updates and closure reports to leadership.
• Produce postmortem reports to identify lessons learned and recommendations.
• Continuously prepare for incidents by updating and maintaining incident response plans, playbooks and procedures.
• Manage and participate in cyber related exercises such as tabletops and cyber ranges.
• Measure the effectiveness and performance of the incident response process through KRI and KPI metrics.
• Identify methods to continuously enhance the incident response process
• Work closely with the SOC to drive development and collaboration
• Train and Mentor SOC personnel
• Creating an environment which drives knowledge sharing with teams across the Fusion Center
• Help developing the Fusion Center mindset and follow the sun model

What We Value

• Experience with investigating & managing major/complex cyber incidents end to end
• Experience working/leading in a SOC or Fusion Center
• Strong operating systems administration skills (Windows, Linux, Mac)
• Strong malware analysis expertise
• Experience in performing memory forensics
• Knowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck)
• Knowledge of IT architecture and operations (computing, network, storage & cloud)
• Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNS
• Master's in cyber security, Information Technology, Computer Science or relevant experience
• CISSP, CEH, OSCP, OSCE or GCIH or applicable certification in Security field
• 4+ years in cyber security SOC/IR type skill role – Incident Response, SOC Tier 3/Lead Analyst, Threat Hunter, Penetration testing, etc.
• Financial Services experience a plus.
• Software development and/or scripting experience a plus: Python, Powershell, SQL etc.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job ID: R-799310