Security Product Manager, Perimeter Defense

State Street; Boston (MA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Health, dental, vision insurance

Paid time off

Employee Assistance Program

Performance-based incentives

Tax-advantaged savings plans

Job summary

State Street is seeking a Security Product Manager for Perimeter Defense. You will define the strategy, roadmap, governance, and security outcomes, coordinating with Security, GTS, and infrastructure teams to continuously assess and improve the perimeter.

You will bring together attack surface management, vulnerability management, security testing, and cloud security to drive measurable security outcomes and reduce perimeter risk.

Qualifications

• Bachelor's degree in information security, CS, engineering, IT or related field or equivalent experience.
• Experience in cybersecurity, technology, risk management, or product management.
• Familiarity with vulnerability management, firewalls, WAF, and cloud security.

Responsibilities

• Define and maintain strategy, roadmap, and security outcomes for Perimeter Defense.
• Establish visibility into perimeter-facing assets across apps, infra, domains, APIs, and cloud services.
• Identify gaps and drive improvements with appropriate teams.
• Collaborate with GTS product owners to reflect security priorities in roadmaps.
• Drive continuous assurance via attack surface, vulnerability management, and security testing.
• Define onboarding requirements and security standards for new perimeter services.
• Establish metrics, governance, and reporting to communicate risk to leadership.
• Support audit, regulatory, risk, and control activities related to perimeter security.

Skills

Communication

Collaboration

Stakeholder management

Analytical thinking

Security concepts

Education

Bachelor's degree in Information Security, CS, Engineering, IT or related field

Tools

Vulnerability management tools

Firewall technologies

Web application security tooling

Cloud security tooling

Job description

Who we are looking for

We are looking for a Security Product Manager, Perimeter Defense reporting directly to the Head of Defensive Engineering.

You will define and drive the strategy, roadmap, governance, and security outcomes for Perimeter Defense. Working across Security, GTS, application teams, and infrastructure teams, you will help ensure the organization's perimeter is continuously understood, assessed, protected, and improved.

This role is focused on bringing together multiple security capabilities and stakeholders to deliver measurable security outcomes and reduce perimeter risk.

Why this role is important to us

The team you will be joining is a part of Global Cyber Security, Defensive Engineering, a function that is vital to protecting the firm, its clients, and its critical business services from cyber threats.

As the organization's technology landscape continues to evolve, maintaining visibility into internet-facing assets and ensuring appropriate security controls are in place is increasingly important. This role helps establish a consistent approach to perimeter security by bringing together capabilities such as attack surface management, vulnerability management, web application protection, responsible disclosure, bug bounty programs, and security testing to improve the overall security posture.

What you will be responsible for

As a Security Product Manager, Perimeter Defense, You Will

• Define and maintain the strategy, roadmap, and security outcomes for the Perimeter Defense product.
• Establish visibility into perimeter-facing assets, including applications, infrastructure, domains, APIs, cloud services, and other externally accessible technologies.
• Identify gaps in security coverage and partner with the appropriate teams to drive improvements.
• Partner with GTS product owners and engineering teams to ensure security requirements and priorities are reflected in platform roadmaps.
• Help drive continuous assurance through attack surface management, vulnerability management, security testing, and related security capabilities.
• Define onboarding requirements and security standards for new perimeter-facing services and technologies.
• Establish metrics, reporting, and governance processes to measure effectiveness and communicate risk and progress to leadership.
• Support audit, regulatory, risk, and control assurance activities related to perimeter security.

What we value

• Strong communication, collaboration, and stakeholder management skills.
• Ability to translate security risks and requirements into practical business and technology outcomes.
• Understanding of cybersecurity concepts such as vulnerability management, perimeter security, application security, cloud security, or attack surface management.
• Experience coordinating initiatives across multiple teams and stakeholders.
• Strong analytical, problem-solving, and decision-making skills.

Education & Preferred Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related field, or equivalent experience.
• Experience in cybersecurity, technology, risk management, product management, or related disciplines.
• Familiarity with security technologies and controls such as vulnerability management, firewalls, web application security, cloud security, or related areas.
• Relevant cybersecurity or product management certifications are a plus.

Additional Requirements

• Ability to work effectively across global teams and multiple stakeholder groups.
• Strong written and verbal communication skills.
• Interest in security, product management, and driving measurable business outcomes.

Work Requirement

• Hybrid work model in accordance with company policy.
• Flexibility to support global teams across multiple time zones as needed.

Salary Range

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Benefits

• our retirement savings plan (401K) with company match
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• eligibility for certain tax advantaged savings plans

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-797790