VP of Product Security & Cloud Defense

State Street; Clifton (NJ); On-site; USD 120,000 - 218,000; Full time

Job summary

State Street is seeking a highly technical Security Guardian, Vice President, to serve as the first line of defense for engineering, platform, and business teams. You will perform hands-on security assessments, design embedded security controls, and drive down risk across cloud and distributed environments.

The role requires deep expertise across multiple advanced security domains, threat modeling, secure software delivery, and collaboration with engineers to build secure systems by default.

Qualifications

• 7+ years of cybersecurity experience with focus in Product and Cloud security; 3+ years in financial services.
• AWS or Azure Cloud Security certification highly valued.
• Bachelor’s degree in Computer Science or related field; professional certifications preferred.

Responsibilities

• Conduct hands-on security assessments at application, platform, and system levels using threat modeling, architecture review, and vulnerability analysis.
• Design and embed concrete security controls in system and application architectures, including identity, cryptography, and network isolation.
• Own and drive down security risk by engaging with engineering teams and validating security controls in production.
• Partner with engineering as an embedded product security expert to influence design decisions early.
• Provide security guidance to senior leadership, translating tradeoffs into actionable engineering decisions.

Skills

Security architecture

Threat modeling

Cloud security

DevSecOps

Attacker mindset

Education

Bachelor’s degree in Computer Science

CISSP/CISM/GIAC certifications

Tools

AWS

Azure

Job description

State Street is seeking a highly technical Security Guardian, Vice President, to serve as the first line of defense for engineering, platform, and business teams. You will perform hands-on security assessments, design embedded security controls, and drive down risk across cloud and distributed environments.

The role requires deep expertise across multiple advanced security domains, threat modeling, secure software delivery, and collaboration with engineers to build secure systems by default.