Cyber Defense Center Manager- MD

State Street seeks to a Managing Director to lead our Cyber Defense Center (CDC) in Quincy, Massachusetts. The successful candidate will be responsible for managing State Street’s North American Cyber Defense Center Team consisting of Timezone Managers, Leads Security Analyst and Early Career Security Analysts. The successful candidate will play a key role as part of the Global Cyber Defense Center team which provides 24/7 365 cyber incident response services across State Street. The CDC team partners with multiple teams in our Cyber Fusion Center including but not limited to Advanced Threat, Cyber Threat Intelligence, & Red/Purple teams.

Join us in evolving our response capabilities to protect State Street, its customers and partners from ever-evolving and sophisticated threat actors.

This role will be Monday - Friday and will be on-site in State Street's office in Quincy.

What will you be responsible for:

• Leading the cyber incident response process to ensure timely triage, analysis, containment, eradication and return to service for high severity or long running incidents.
• Author and review incident status updates and closure reports to leadership.
• Produce postmortem reports to identify lessons learned and recommendations.
• Continuously prepare for incidents by updating and maintaining incident response plans, playbooks and procedures.
• Manage and participate in cyber related exercises such as table tops and cyber ranges.
• Measure the effectiveness and performance of the incident response process through KRI and KPI metrics.
• Train and Mentor SOC personnel.
• Creating an environment which drives knowledge sharing with teams across the Fusion Center, and lead the growth of the Cyber Fusion Center in Quincy
• Help developing the Fusion Center mindset and follow the sun model

• Experience managing a team of SOC analysts.
• Experience leading a team of analysts investigating & managing major/complex cyber incidents end to end
• Experience writing detailed cybersecurity reports including lessons learned
• Strong communication skills, along with experience communicating to an executive audience.
• Knowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck).
• Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNS

​

• Bachelor's or Master’s in Cyber Security, Information Technology or Computer Science. In lieu of education requirements, relevant industry experience will be considered.
• CISSP, CEH, OSCP, OSCE or GCIH or applicable certification in Security field
• 5+ years in a cyber security management role
• Financial Services experience a plus.