VP, Endpoint Security Product Leader

State Street; Austin (TX); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits program

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a VP, Endpoint Product Security Lead to guide the Defensive Engineering team within Global Cyber Security. You will define strategy, roadmap, and maturity of enterprise endpoint security capabilities, partnering with GTS Endpoint Platform leaders to align security requirements with platform priorities.

You will lead a cross-functional team across Infrastructure, Desktop Engineering, Server, Cloud, and other technology groups, embedding security throughout the endpoint

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• 8+ years of experience in cybersecurity, endpoint security, security engineering, security architecture, or security product management.
• 3+ years of experience leading technical or cybersecurity teams.
• Experience implementing or maturing enterprise security platforms and controls at scale.
• Experience working in financial services or another highly regulated industry preferred.
• Relevant certifications such as CISSP, CCSP, GIAC, or equivalent preferred.

Responsibilities

• Lead, develop, and manage a team of endpoint product security professionals, setting clear priorities, expectations, and accountability.
• Define and drive the enterprise endpoint security strategy, product roadmap, and maturity plan.
• Build a shared product operating model with GTS Endpoint Platform leaders that aligns priorities, roadmaps, ownership, and success measures.
• Treat the GTS Endpoint Platform organization as a key customer and partner, ensuring security capabilities are practical, scalable, and embedded within endpoint platform services.
• Establish shared outcomes and metrics across GCS and GTS for endpoint security coverage, policy enforcement, control effectiveness, exceptions, and risk reduction.
• Drive the adoption and maturity of capabilities such as application control, browser security, endpoint hardening, attack surface reduction, and endpoint resilience.
• Establish endpoint security requirements, configuration standards, policy baselines, and secure-by-design practices.
• Assess control coverage and effectiveness, identify security gaps, and prioritize improvements based on threat, risk, and business impact.
• Lead security product evaluations, proof-of-concepts, vendor assessments, and platform lifecycle planning.
• Collaborate with the Cyber Defense Center to improve endpoint telemetry, visibility, investigation, and incident response capabilities.
• Partner with Infrastructure, Desktop Engineering, Server, Cloud, and other technology teams to embed security throughout the endpoint lifecycle.
• Maintain product documentation, control evidence, and supporting materials for risk, audit, and regulatory requirements.
• Serve as the product owner and senior subject matter expert for enterprise endpoint security capabilities.

Skills

Team leadership

Endpoint security

Cross-functional collaboration

Security requirements alignment

Security product strategy

Endpoint threat knowledge

App control

Browser security

Endpoint hardening

Attack surface reduction

Endpoint resilience

Security frameworks

Metrics & remediation

Leadership

Product management

Communication

Stakeholder management

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or related field

CISSP or equivalent certification

Job description

State Street is seeking a VP, Endpoint Product Security Lead to guide the Defensive Engineering team within Global Cyber Security. You will define strategy, roadmap, and maturity of enterprise endpoint security capabilities, partnering with GTS Endpoint Platform leaders to align security requirements with platform priorities.

You will lead a cross-functional team across Infrastructure, Desktop Engineering, Server, Cloud, and other technology groups, embedding security throughout the endpoint