Threat Assurance Analyst

STATE STREET CORPORATION; Quincy (MA); On-site; USD 90,000 - 157,500; Full time

Job summary

State Street Corporation seeks a Threat Assurance Analyst (AVP) to join the Assurance Analysis team, focusing on translating policies into threat impact and defensive coverage for cyber leadership.

You will collaborate with control owners, testing teams, and Blue/Red teams, maintain dashboards, and shape assurance tooling and workflows with product and data teams.

Qualifications

• Bachelor’s degree in a related field.
• 3–5 years’ experience in a cyber security role.
• Exposure to penetration testing and technical controls.
• Hands-on or oversight experience with technical control platforms and technologies (e.g. SIEM, EDR, DLP, Proxy).

Responsibilities

• Engage technical control owners to source their mapped control data and translate policies to industry frameworks.
• Engage testing and partner teams to define and map testing results to internal data models.
• Interpret testing results with defensive strengths and gaps in controls.
• Maintain dashboards and data models informing stakeholders of assurance activities and enterprise posture.
• Design and apply AI-assisted workflows to accelerate analysis while validating outputs for accuracy and integrity.
• Produce and maintain documentation of data sources, schema definitions, and transformations.

Skills

Python

SQL

Power BI

Data analytics

Communication

Education

Bachelor's degree in related field

Tools

SIEM

EDR

DLP

Proxy

Job description

We are looking for a Threat Assurance Analyst (AVP) to join the Assurance Analysis team – a new team working at the intersection of threat intelligence, testing and controls. This role will be focused on interacting with internal and external testing partners and control owners as we source, transform and interpret data from our stakeholders to understand enterprise posture and provide assurance insights to our cyber partners and leadership.The ideal candidate has a diverse cyber background with previous experience in – or a genuine appreciation for – cyber data analytics and science. They are expert enough to interpret the outputs of partner teams, yet independent enough to produce their own analysis. This individual will communicate assurance from the threat perspective – translating policies into threat impact and defensive coverage – and will work with a diverse range of teams, tailoring communication to each audience’s level of technical knowledge.This role is one meant to build upon the foundation already established by the team to enhance the coverage and understanding across the different data domains. We are a threat-led team, utilizing our curated data to assist in threat-informed testing and defenses. Threat intelligence is our foundation and an understanding of relevant frameworks like MITRE ATT&CK is a must.In this role, you will:Engage technical control owners to source their mapped control data, translating and mapping their policies to industry frameworks (e.g. MITRE ATT&CK).Engage testing and partner teams (Pen Test, Red Teams, Purple Teams) to accurately define and map testing results to internal data modelsInterpret testing results alongside relevant defensive strengths and shortfalls in controlsWork with Blue Team partners (SOC, Detection Engineers) to gain additional data – testing outcome enrichment and control insightsMaintain dashboards and data models that inform stakeholders of assurance activities and enterprise posture.Design and apply AI-assisted workflows to accelerate analysis while validating outputs to ensure data accuracy and integrityAssist in feature development, working with product and data teams to mature assurance tooling and processes.Communicate assurance from the threat perspective, translating policies into threat impact and defensive coverage for technical and leadership audiences alike.Produce and maintain clear documentation of data sources, schema definitions, mapping logic, transformations and analytical decisions to ensure work is transparent, repeatable and auditable.Keep a finger on the pulse of industry framework changes to help partner teams stay unified and up to date.These skills will help you succeed in this role:Familiarity with the MITRE ATT&CK frameworkData analytics experience with proven application in the cyber field.Experience with Python, SQL and Power BI.Strong communication skills, with the ability to tailor technical detail to varied audiencesA disciplined approach to documentation, capable of producing clear, reusable records that support tracking, auditability and governance.Education & Preferred QualificationsBachelor’s degree in a related field3–5 years’ experience in a cyber security role.Exposure to penetration testing and technical controls.Hands-on or oversight experience with technical control platforms and technologies (e.g. SIEM, EDR, DLP, Proxy).Industry certification (e.g. CompTIA, SANS/GIAC) preferred but not requiredUnderstanding of cyber threat intelligence and threat-informed defense conceptsSalary Range:$90,000 - $157,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.For a full overview, visit https://hrportal.ehr.com/statestreet/Home .About State StreetAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.Discover more information on jobs at StateStreet.com/careersRead our CEO StatementJob Application Disclosure:It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.