VP, External Attack Surface Management & Perimeter Assurance

State Street; Quincy (MA); On-site; USD 125,000 - 215,000; Full time

Job summary

State Street seeks an External Attack Surface Management (EASM) / Persistent Perimeter Assurance Analyst within the Global Cybersecurity organization, located on-site in Quincy, MA (or Boston, MA).

The role drives persistent discovery, monitoring and reduction of the internet-facing attack surface while partnering with CDC and Vulnerability Mgmt teams to triage and remediate external exposures across corporate networks and subsidiaries.

Qualifications

• Bachelor's in Cyber Security, IT, CS or equivalent field.
• CISSP, CISM, CIPM, OSCP, GCIH or applicable certification is a plus.
• Financial Services experience or regulatory/audit experience is a plus.
• Experience with EASM or external vulnerability scanning at enterprise scale is preferred.
• Strong analytical and communication skills; ability to translate exposure into executive narratives.

Responsibilities

• Own the persistent External Attack Surface Management (EASM) capability across corporate assets, including live inventory, domains, certificates, cloud exposure and shadow IT.
• Operate continuous EASM/external scanning and triage findings through remediation.
• Develop and maintain perimeter assurance documentation and evidence of closure.
• Assist with coordinated disclosure and bug bounty programs, acting as the bridge between researchers and remediation owners.
• Present perimeter assurance status in meetings and monthly reviews with SLA evidence.
• Lead evaluation of EASM tooling and build-vs-buy decisions against a weighted scorecard.
• Support a high-performance culture and knowledge sharing across the Cyber Fusion Center.

Skills

EASM experience

Vulnerability triage

Cross-functional collaboration

Bug bounty coordination

Threat analysis

Executive communication

IT security frameworks

Education

Bachelor's in Cyber Security, Information Technology, Computer Science or relevant field

Tools

SIEM

EDR/EPP

DNS/PKI/AD

Web Proxy/Content filtering

Job description

State Street seeks an External Attack Surface Management (EASM) / Persistent Perimeter Assurance Analyst within the Global Cybersecurity organization, located on-site in Quincy, MA (or Boston, MA).

The role drives persistent discovery, monitoring and reduction of the internet-facing attack surface while partnering with CDC and Vulnerability Mgmt teams to triage and remediate external exposures across corporate networks and subsidiaries.