Cryptographic Agility Surveillance Analyst

State Street; Devon (PA); On-site; USD 70,000 - 118,750; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits package

Paid time off

Job summary

State Street is seeking a Cryptographic Agility Surveillance Analyst to support the Cryptographic Agility Surveillance Program. You will monitor threats, analyze cryptographic risks, and communicate findings to technical and non-technical stakeholders.

You will work with encryption engineers, security architects, and technology teams to strengthen cryptographic controls and support governance, risk, and regulatory initiatives.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field, or equivalent practical experience.
• 1–3 years of cybersecurity, risk, security operations, IT audit, threat intelligence, vulnerability management, or related field.
• Foundational understanding of cybersecurity, encryption, authentication, and data protection concepts.
• Basic knowledge of TLS, PKI, certificates, hashing, and encryption.
• Exposure to scripting or programming languages such as Python, PowerShell, Java, JavaScript, C#, or SQL.
• Knowledge of post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management.

Responsibilities

• Monitor industry, regulatory, vendor, and academic sources for cryptographic threats and standards changes.
• Track developments related to encryption algorithms, cryptographic protocols, PQC, key management, and digital certificates.
• Summarize cryptographic intelligence from multiple sources for technical and non-technical stakeholders.
• Assist in identifying and assessing cryptographic risks impacting applications, infrastructure, or controls.
• Support creation of intelligence reports, risk summaries, dashboards, and presentations for security teams.
• Maintain inventories and datasets to support cryptographic risk monitoring.
• Participate in reviews of advisories, standards publications, and vendor security notices.
• Assist investigations into cryptographic weaknesses and document potential business impacts.
• Collaborate with engineering to understand cryptographic implementations and remediation planning.
• Contribute to evidence gathering for governance, audit, and regulatory requirements.
• Maintain processes and playbooks for the Cryptographic Agility Surveillance Program.
• Collaborate with other Cyber Threat Intelligence teams to mature threat intelligence processes.

Skills

Cybersecurity

Threat intelligence

Cryptography

Analytical thinking

Clear communication

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Python

PowerShell

Java

JavaScript

SQL

Job description

Who We Are Looking For

State Street is seeking a motivated and intellectually curious Cryptographic Agility Surveillance Analyst to support the development and operation of the firm's Cryptographic Agility Surveillance Program.

The Cryptographic Agility Surveillance Program is a centralized capability that continuously monitors, collects, and analyzes cryptographic intelligence to help the organization understand and respond to changes in the cryptographic landscape. By identifying emerging risks such as algorithm deprecation, protocol vulnerabilities, advances in quantum computing, regulatory developments, and industry best practices, the program enables informed decision-making and supports the long-term resilience of State Street's cryptographic controls.

As a Cryptographic Agility Surveillance Analyst, you will help gather, analyze, and report on cryptographic risks and trends that could impact the firm's security posture. Working closely with encryption engineers, security architects, risk partners, and technology teams, you will contribute to maintaining the effectiveness of cryptographic controls and support strategic initiatives that strengthen State Street's cyber resilience.

What You Will Be Responsible For

• Monitor industry, regulatory, vendor, and academic sources for emerging cryptographic threats, vulnerabilities, standards changes, and technology developments.
• Track developments related to encryption algorithms, cryptographic protocols, post-quantum cryptography (PQC), key management, digital certificates, and cryptographic libraries.
• Research and summarize cryptographic intelligence from multiple sources and communicate findings to technical and non-technical stakeholders.
• Assist in the identification and assessment of cryptographic risks that may impact applications, infrastructure, or security controls.
• Support the creation of intelligence reports, risk summaries, dashboards, metrics, and presentations for security and technology teams.
• Maintain inventories, datasets, and documentation used to support cryptographic risk monitoring and analysis activities.
• Participate in periodic reviews of external advisories, standards publications, and vendor security announcements.
• Support investigations into newly identified cryptographic weaknesses and help document potential business impacts.
• Collaborate with engineering and architecture teams to understand cryptographic implementations and support remediation planning efforts.
• Contribute to evidence gathering and reporting activities that support internal governance, audit, and regulatory requirements.
• Assist in maintaining processes, playbooks, and operating procedures that support the Cryptographic Agility Surveillance Program.
• Collaborate with other Cyber Threat Intelligence teams to establish consistent and mature threat intelligence processes and tooling.
• Ability to apply the Admiralty System to establish and manage source reliability and information credibility to enhance automated processing of expansive, continuously collected intelligence.
• Continuously build knowledge of cryptographic concepts, cybersecurity trends, and emerging technologies.

What We Value

• A strong interest in cybersecurity, cryptography, threat intelligence, or technology risk management.
• Analytical thinking and the ability to evaluate technical information from multiple sources.
• Curiosity and a desire to understand how emerging technologies and industry developments impact security risk.
• Strong written and verbal communication skills, with the ability to summarize technical topics clearly and concisely.
• Attention to detail and a disciplined approach to research, documentation, and data analysis.
• A collaborative mindset and willingness to work across multiple teams and stakeholder groups.
• An eagerness to learn and develop skills in cryptography, encryption technologies, and cybersecurity operations.
• Ability to manage multiple work items while maintaining high-quality deliverables.
• Professionalism, integrity, and a commitment to protecting confidential information.
• A continuous improvement mindset with a willingness to identify opportunities to enhance processes and operational effectiveness.

Education & Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Engineering, Mathematics, or a related field, or equivalent practical experience.
• One to three years of experience in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or a related field.
• Foundational understanding of cybersecurity principles, encryption, authentication, and data protection concepts.
• Basic knowledge of common cryptographic technologies, including TLS, PKI, certificates, hashing, and encryption.
• Exposure to scripting or programming languages such as Python, PowerShell, Java, JavaScript, C#, or SQL.
• Experience conducting research, data analysis, or technical investigations through academic, internship, or professional experience.
• Knowledge of emerging topics such as post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management.

Salary Range

$70,000 - $118,750 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.