Hybrid Senior Security Engineer, Cyber Defense Platforms

at State Street

• Job title: Senior Security Engineer, Cyber Defense Platforms
• Job type: Full Time
• Experience level: Senior
• Salary: $90,000 - $157,500 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security
• Location requirements: Hybrid, Boston, United States

About the role

• Senior Security Engineer focusing on hardening enterprise endpoints for cyber defense. Collaborating with NetSec and DataSec teams to minimize risks and enforce security protocols.

Responsibilities

• Design, implement, and maintain endpoint hardening standards across workstations and servers, aligned with CIS benchmarks, internal standards, and risk-based guidance
• Reduce enterprise attack surface by disabling unnecessary services, features, protocols, and tooling across endpoint environments
• Engineer and support execution control mechanisms, including application control, script control, and prevention of unauthorized software
• Partner with NetSec teams to reduce endpoint-to-network exposure, including protocol restrictions, dependency mapping, and Zero Trust enforcement considerations
• Support DataSec initiatives by enabling endpoint-level controls that protect sensitive data and enforce approved software and data handling policies
• Identify and assess unapproved or risky endpoint software, working with stakeholders on remediation, allow-listing, or removal paths
• Collaborate with platform, infrastructure, and operations teams to ensure controls are scalable, reliable, and operationally sustainable
• Contribute to security architecture documentation, standards, and roadmaps related to endpoint and defense platforms

Requirements

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related discipline (or equivalent experience)
• 8+ years of experience in security engineering, endpoint security, or defensive cyber roles
• Strong hands-on experience with endpoint security platforms (e.g., EDR, application control, configuration management, hardening frameworks)
• Experience with Zero Trust principles, endpoint-to-network control models, or execution control technologies
• Security certifications such as CISSP, GCED, GSEC, OSCP, or relevant vendor certifications are a plus
• Experience working in regulated or large enterprise environments preferred
• Ability to influence and drive security improvements without direct authority
• Occasional after-hours support for high-risk changes or security incidents, as required

Benefits

• health insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• retirement savings plan (401K) with company match
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards