Threat Assurance Analyst

State Street; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K match

Insurance coverage

PTO & sick leave

Employee Assistance Program

Incentive compensation

Tax-advantaged savings plans

Job summary

State Street seeks a Threat Assurance Analyst (AVP) to join the Assurance Analysis team. The role focuses on threat intelligence, testing, and controls, interfacing with internal and external partners to source, transform, and interpret data for enterprise posture insights.

The ideal candidate has a cyber data analytics background, can translate policies into threat impact, and communicate effectively with varied audiences, including leadership.

Qualifications

• Bachelor’s degree in a related field is required.
• 3–5 years of experience in a cyber security role.
• Exposure to penetration testing and technical controls is preferred.
• Hands-on or oversight experience with technical control platforms and technologies (e.g. SIEM, EDR, DLP, Proxy).

Responsibilities

• Engage technical control owners to source mapped data and translate policies to industry frameworks.
• Collaborate with testing and partner teams to define and map testing results to internal data models.
• Interpret testing results with defensive strengths and shortfalls in controls.
• Work with SOC/Detection Engineers to gain data and insights for assurance activities.
• Maintain dashboards and data models informing stakeholders of enterprise posture.

Skills

Data analytics

Python

SQL

Power BI

Communication

Documentation

Education

Bachelor’s degree in a related field

3–5 years in cyber security

Exposure to penetration testing

Familiarity with controls platforms

Tools

SIEM

EDR

DLP

Proxy

Job description

We are looking for a Threat Assurance Analyst (AVP) to join the Assurance Analysis team – a new team working at the intersection of threat intelligence, testing and controls. This role will be focused on interacting with internal and external testing partners and control owners as we source, transform and interpret data from our stakeholders to understand enterprise posture and provide assurance insights to our cyber partners and leadership.

The ideal candidate has a diverse cyber background with previous experience in – or a genuine appreciation for – cyber data analytics and science. They are expert enough to interpret the outputs of partner teams, yet independent enough to produce their own analysis. This individual will communicate assurance from the threat perspective – translating policies into threat impact and defensive coverage – and will work with a diverse range of teams, tailoring communication to each audience’s level of technical knowledge.

This role is one meant to build upon the foundation already established by the team to enhance the coverage and understanding across the different data domains. We are a threat-led team, utilizing our curated data to assist in threat-informed testing and defenses. Threat intelligence is our foundation and an understanding of relevant frameworks like MITRE ATT&CK is a must.

In This Role, You Will

• Engage technical control owners to source their mapped control data, translating and mapping their policies to industry frameworks (e.g. MITRE ATT&CK).
• Engage testing and partner teams (Pen Test, Red Teams, Purple Teams) to accurately define and map testing results to internal data models
• Interpret testing results alongside relevant defensive strengths and shortfalls in controls
• Work with Blue Team partners (SOC, Detection Engineers) to gain additional data – testing outcome enrichment and control insights
• Maintain dashboards and data models that inform stakeholders of assurance activities and enterprise posture.
• Design and apply AI-assisted workflows to accelerate analysis while validating outputs to ensure data accuracy and integrity
• Assist in feature development, working with product and data teams to mature assurance tooling and processes.
• Communicate assurance from the threat perspective, translating policies into threat impact and defensive coverage for technical and leadership audiences alike.
• Produce and maintain clear documentation of data sources, schema definitions, mapping logic, transformations and analytical decisions to ensure work is transparent, repeatable and auditable.
• Keep a finger on the pulse of industry framework changes to help partner teams stay unified and up to date.

These skills will help you succeed in this role

• Familiarity with the MITRE ATT&CK framework
• Data analytics experience with proven application in the cyber field.
• Experience with Python, SQL and Power BI.
• Strong communication skills, with the ability to tailor technical detail to varied audiences
• A disciplined approach to documentation, capable of producing clear, reusable records that support tracking, auditability and governance.

Education & Preferred Qualifications

• Bachelor’s degree in a related field
• 3–5 years’ experience in a cyber security role.
• Exposure to penetration testing and technical controls.
• Hands-on or oversight experience with technical control platforms and technologies (e.g. SIEM, EDR, DLP, Proxy).
• Industry certification (e.g. CompTIA, SANS/GIAC) preferred but not required
• Understanding of cyber threat intelligence and threat-informed defense concepts

Salary Range

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes:

• our retirement savings plan (401K) with company match
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• and, eligibility for certain tax advantaged savings plans

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-795239