Product Security Engineer / Architect – Email Security

State Street; Princeton (NJ); Hybrid; USD 120,000 - 202,500; Full time

Job summary

State Street is seeking a Product Security Engineer / Architect – Email Security within Global Cyber Security. You will lead the strategy, architecture, and engineering of enterprise email security to protect against phishing, BEC, account takeovers, malware, and emerging threats.

You will collaborate with the Defensive Engineering leadership and cross‑functional teams to design controls, implement security capabilities, and drive incident response initiatives across the email ecosystem.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• 8+ years of experience in cybersecurity, security engineering, or security architecture.
• 5+ years of hands-on experience with email security technologies and threat protection solutions.
• Experience working in financial services or other regulated industries preferred.
• Relevant certifications such as CISSP, CCSP, GIAC, or Microsoft Security certifications preferred.

Responsibilities

• Define and drive the enterprise email security strategy, architecture, and roadmap.
• Lead evaluation, implementation, and continuous improvement of email security technologies and controls.
• Partner with the GTS Email Platform team to deploy security capabilities across the email ecosystem.
• Collaborate with the Cyber Defense Center to enhance detection, investigation, and response for email threats.
• Work with Threat Intelligence, Identity Security, and Incident Response to identify emerging threats.
• Lead product evaluations, proof-of-concepts, and vendor assessments for email security technologies.
• Drive integration of email security solutions with security monitoring, analytics, and response platforms.
• Develop security standards, architectural patterns, and implementation guidance for email security.
• Track and report key metrics related to email threat protection and risk reduction.
• Serve as a subject-matter expert for enterprise email security initiatives.

Skills

Email security platforms

Automation scripting

Threat intelligence

Stakeholder management

Education

Bachelor's degree in CS/InfoSec/Engineering

Relevant security certifications

Tools

Microsoft Defender for Office 365

Proofpoint

Mimecast

Abnormal Security

Cisco Secure Email

SIEM

SOAR

Job description

Who We Are Looking For

We are seeking a Product Security Engineer / Architect – Email Security reporting to the Defensive Engineering leadership team within Global Cyber Security (GCS). The role will lead the strategy, architecture, and engineering of enterprise email security capabilities to protect the organization against phishing, business email compromise (BEC), account takeover, malware, and emerging threats.

Why This Role Is Important to Us

As part of Defensive Engineering within Global Cyber Security, this position is critical to our cybersecurity strategy. Email remains a primary attack vector, and this role will drive the technologies, controls, and capabilities needed to safeguard our communication channels and reduce cyber risk.

What You Will Be Responsible For

• Define and drive the enterprise email security strategy, architecture, and roadmap.
• Lead evaluation, implementation, and continuous improvement of email security technologies and controls.
• Partner with the GTS Email Platform team to design and deploy security capabilities across the email ecosystem.
• Collaborate with the Cyber Defense Center to enhance detection, investigation, and response for phishing, BEC, account takeover, and other email‑borne threats.
• Work with Threat Intelligence, Identity Security, and Incident Response to identify emerging threats and improve defensive controls.
• Lead product evaluations, proof‑of‑concepts, and vendor assessments for email security technologies.
• Drive integration of email security solutions with security monitoring, analytics, and response platforms.
• Develop security standards, architectural patterns, and implementation guidance for email security controls.
• Track and report key metrics related to email threat protection, phishing resilience, and risk reduction.
• Serve as a subject‑matter expert for enterprise email security initiatives.

What We Value

• Experience with enterprise email security technologies such as Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, or similar platforms.
• Strong understanding of phishing, BEC, account takeover, malware, social engineering, and email‑based threats.
• Knowledge of email security technologies including SPF, DKIM, DMARC, SMTP security, and email authentication frameworks.
• Experience designing and implementing enterprise‑scale email security controls and architectures.
• Experience integrating email security platforms with SIEM, SOAR, identity, endpoint, and threat intelligence solutions.
• Strong analytical, problem‑solving, automation, and scripting skills.
• Excellent communication and stakeholder management skills.

Education & Preferred Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent practical experience.
• 8+ years of experience in cybersecurity, security engineering, or security architecture.
• 5+ years of hands‑on experience with email security technologies and threat protection solutions.
• Experience working in financial services or other regulated industries preferred.
• Relevant certifications such as CISSP, CCSP, GIAC, or Microsoft Security certifications preferred.

Additional Requirements

• Experience developing security strategies, roadmaps, and architecture standards.
• Familiarity with emerging AI‑driven phishing, impersonation, and social engineering threats.
• Strong collaboration skills and ability to work across Cyber Security, GTS, and Engineering organizations.
• Ability to translate security risks into actionable technical solutions.

Work Requirement

• Hybrid work model in accordance with company policy.
• Ability to collaborate effectively with global teams across multiple time zones.
• Standard business hours with flexibility to support critical security incidents and initiatives when required.

Salary Range

$120,000 – $202,500 annual (based on primary location; may differ if located elsewhere).

Benefits

Employees are eligible to participate in a comprehensive benefits program, including retirement savings plan (401K) with company match; insurance coverage (basic life, medical, dental, vision, long‑term disability, and other optional coverages); paid time off (vacation, sick leave, short‑term disability, and family care responsibilities); access to Employee Assistance Program; incentive compensation with eligibility for annual performance‑based awards; and certain tax‑advantaged savings plans.

Equal Opportunity Employer

We consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.